MAL-2025-105905 Malicious code in mixed_eel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0911dbfdd1ec7014bf298b887eb25bbe97601d17701e2dd16745d7024c59f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99872 Malicious code in beautiful_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59f759d05babf217ef9b42e6a08ac40995c0ec0132e21a9f8ce9ef97f7b178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110468 Malicious code in victorious_sheep-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660d1127a5290d9efc1e0aa7a2b01a913864aa0ae94a0530b4f8ef2b4e2752e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107264 Malicious code in prime_cuckoo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06623d98f800abb7a70b175e619814764b2bd242d10b6866a8eddc553bb656ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110166 Malicious code in unnecessary_sparrow-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7659d404a384b25a68d1a83a347330a41d20a882ac150f5d5ccd289880133313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99971 Malicious code in big_sparrow-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb25675cfd24c676fac1dd5a270a987c41c500397b84787f198d8fb48dfea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109033 Malicious code in sporting_hookworm-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc1655b623089824999bb372bfaff044778953f2546ad07a8745f759d8498a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_crab-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b60825f385ed85ebf642353097f3d6651c563acefbc88891686f53fa3878305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_meerkat-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8744b76fdf3b282b1dd34ddaaf96526c970fd69c7f50034849f55456ca06df1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106795 Malicious code in original_grouse-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f82166482c28a4efd75fea752d02c7d12ee91e98332816ddaed57fed05ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101667 Malicious code in disturbed_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3cd29ae5942d5b4a73a84cd53bd0aa17bbc3f8cf2b8e2f7c3856af379ff1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108454 Malicious code in seblakkuah17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260f81dc730efc8b5d7a3d33ae692e51bf949ff8825e65dc7f9494f2ed49a7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100054 Malicious code in boring_mongoose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f1405eff71874dd19e72453de43f72d53b950acff822d5e410413d02f8cb13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106836 Malicious code in outrageous_cobra-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f72f985688aa300fc448a9dfab1ea3daf9b190903cb97fc8e2a7c0da171b90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100013 Malicious code in blind_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d8a399f1bcfb7d895b03f1e6058622854c9001db18b5c68ef435959d83289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106302 Malicious code in nice_rhinoceros-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89dfc58d65e0aba3886757b36ad049896f8df5701c55138247eb93f36c8a75d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_ptarmigan-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6593022e4b73e704062a36948a821a18eeb5e8b18c1e8b681834ceb1b7fd5c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_chickadee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58183a2cb9088560c3fe07aac033e09e625153238390610b49b49b022a97eb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4612de8758ec3ebe1406e58b0be59fa8d0b451320aec435ceb911b1de4598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...