MAL-2025-109965 Malicious code in ultimate_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcea628ea409e46815eb4ff96e7ca73104b1d8759b21d8b59eb5b72b88c13f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107874 Malicious code in reluctant_krill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a30d54104aa024b63c26c98c8276a005220afd809994fa25ea39d40441a4088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105635 Malicious code in marvellous_quelea-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c824126baf2d2952afbe28fa6da7b508f2649f1a0e508303e4cb1542702c501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vrvhxk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2b35c698b9013f76df38ef4a1c5b54c7c6793fdd0b10c1bbf4fc503c907573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111044 Malicious code in wtixqr-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64576ef9ec2f2852a9831f9819ba7322617e36002ae531f8fb75f200c7a8295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108194 Malicious code in romantic_mink-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a67664be1c3e9c04d5e35b30521448c9e15f5d9b3b8d8a20a66b6c43e5de833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106494 Malicious code in obnoxious_sturgeon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b7ad2c7793631302e002726033f9f5a5e128d3aeb78a6ec46d4208b6a4eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103870 Malicious code in hyvorlas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89ee2c1afea2ca05ac92ea6bfcd4e4d7551f05beb90a723b79dee9b6b31d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102374 Malicious code in expensive_roundworm-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e40d4dd59ce6497e1ae95a347a9cfa40f8e9767ef3e36cf87cfec7f6b1d877a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107043 Malicious code in personal_clam-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abdfa5786b6d74c85e3c3074bc472cf423308d3633860704049c5d0816fb6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101735 Malicious code in donut-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49baf6523329832c4696b711cbaab5fad85e5c152f15849e4da1c323535a28ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_raven-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbda60d2d3d6ec06d56b53c9ae6da54491089f19919b0272f116c188224517f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99223 Malicious code in aerith-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d79ede5dc5fe4e4b5632fdc123c5bc657f5abd3a6f7e1adc53245280dd15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101333 Malicious code in democratic_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3e6ae0c90fb73379f61e7c4e2a3ff80f5a1453007580ba24f093668acf7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99195 Malicious code in administrative_marlin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732f8a4144fa1a48534d12229fed7898a35d94a32180a24900139fed4a348f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99733 Malicious code in back_marmot-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabab5c48da7d24a0fabeb7be55363146312b89a1727c96794e609d990daae01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101237 Malicious code in dear_dormouse-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3a36db1654864382d5d5113f862b5e67f7b71de99b7e915b51633b61147bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100029 Malicious code in blushing_gazelle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac04e79b7bd0692cfa4289d4bcea1dd1aead67021ee8d8ef57acc9b0aad73bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101621 Malicious code in disastrous_pigeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f578fb62303302648c268ef0e73a9a72dc0cc0a5f22146fdc15cb0135bfe6150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110255 Malicious code in useless_starfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842b5990384858bd4404b884f5ccbc0a7d581f6755fadd5c9ce56a4da8b98612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...