MAL-2025-99470 Malicious code in angry_seahorse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01c1fb016130875b92ff772501cf50cdefad13c224a009f5645a854c0767111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106053 Malicious code in musical_stoat-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e47ab7236febec623580c77ae14ec4000de8a4acdab661ca44149ef18c9d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100948 Malicious code in continuous_landfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e7a420bc536cc6c83337b03dc9a57d4ce644d2073f5f112db121766f152f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108308 Malicious code in rymzol-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53394981458b70e8de67cbfddb4424dfd2c836474a9022650968d4f02cf50e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100343 Malicious code in charlie-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1cb4fa23baf4caad8f5026354583f69cf0a2a2d62b49106cfe6100bba684a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110081 Malicious code in unemployed_silverfish-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d915d00936e1ab18761c24bc969630654ba3337a5d5fcda03bee9f1e25e64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104287 Malicious code in integrated_parrotfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbec436b375ac90bc41a917bd74ebbf27c02d28014ef4adfc5d88aa225115c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102283 Malicious code in everyday_ox-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af4a51bd3019769bb4bcdea5bafb2c10cbc260bc2588544cece2681e016dee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104439 Malicious code in itchy_impala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad334becc234d2661d0a676d8a4a9379f00608bde010dbfd2b501151c4491f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110839 Malicious code in whole_marten-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ddb361057f47c3d6f02ab0c1605a284a153cf1c46afbf347277cde518690c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100834 Malicious code in confident_toucan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc92420dd7ca64e458044aaa0144643786019b9037ab12f6a5fe6f5b462d710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_beaver-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e70e8600badd9a8a4d089a3c339d744552d55ca826eef7c9900ee0046979fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nyghqd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d367f0fc4c7f8c56bd3022f849a674177d40311e006712803d09b1753c3fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ndcsmy-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e23104d1d96eeeae08ed379a2c7ee23b9988a568a8aa1d4ab6dd7fe5c5d9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_cardinal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf7a3636229571c428e2877e0c9bbce95d0fbc7cc7751cd817f7a8d0770015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_leopon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a198469d162a2dcd44a241f4e10d7dbbce82d064e1c9e49aa1ed1d0229cf904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_hare-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa5a07e63396805f3bf7c13174c7bf158c959cf0c543197a029538ef45f4a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_lamprey-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001811cb1364a5e00ef42ec1c7bf44c5555bdaf3f8475f3bb22bb3591949227c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6543e02bbfef9992a4e7739de9979704f9827f20601bd789847ca5a9691f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7dc115fd587505f587715c0b1a9a92dfa955881e0bcfbc3f9067c749b17e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...