MAL-2025-99985 Malicious code in biological_xerinae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a838841b1f6e2f1202ec26084b7df541dc97f3484e835f16aa3f66f6c61c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103800 Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b3eb354993471d21600a2f3ea8a3f93565740ce68508b28b9b05f6fdf9817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101621 Malicious code in disastrous_pigeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f578fb62303302648c268ef0e73a9a72dc0cc0a5f22146fdc15cb0135bfe6150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99195 Malicious code in administrative_marlin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732f8a4144fa1a48534d12229fed7898a35d94a32180a24900139fed4a348f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103870 Malicious code in hyvorlas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89ee2c1afea2ca05ac92ea6bfcd4e4d7551f05beb90a723b79dee9b6b31d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swjgkw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f13cd5902882c4e809fde8aea59d5792192a48bfe9e3e3ff2974c4a1bd8b9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101735 Malicious code in donut-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49baf6523329832c4696b711cbaab5fad85e5c152f15849e4da1c323535a28ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106066 Malicious code in mvtuah-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c5da87a5df320dc634920e80d7803bdee52d1bc9fe7b2104067616d0b56f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102666 Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106353 Malicious code in nlelci-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82730118d46e13073bd27928e56c2e31e8cbb2bdb2de6f50c8678397a432b15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_dormouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4251952a49b2cae3af1d10b442e768989294db346164a5d3d90355199ee08f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100029 Malicious code in blushing_gazelle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac04e79b7bd0692cfa4289d4bcea1dd1aead67021ee8d8ef57acc9b0aad73bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_chickadee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58183a2cb9088560c3fe07aac033e09e625153238390610b49b49b022a97eb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107248 Malicious code in previous_quokka-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293bc888c42ce59c4c84449f6e5d9113cb62d1b8ad60d7d61f9bc47d85811235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_hippopotamus-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93988c25cb7d243f6fb1a917479695eb9bb7499a37f6577a2909cc3767d2f841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_primate-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f99f34488f25ca3c79687489f538c769f20a991f209f0e115b4b2856b2cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe96693ab379d9c6bfee4c72e529a607e0b290daa2804c3be6ad44b837e3dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103368 Malicious code in great_bass-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8be4b6f97a4ef1607cf96d2747c2a68dc865c46f44bb335acc5f11450175d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...