MAL-2025-106380 Malicious code in northern_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca60d3dbc8709fbb4d10b5fd1ba76f480f6794eb52f1867bd534da3b7eb8e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106718 Malicious code in old_reptile-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d48d8982a57ff9fc041d59f48a76df242529e76033dd09633aca55db6f891f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99213 Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101369 Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_cod-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b022e81d82b49c440d7f7bff80ef97cfe9e2f8d65af92302c4553323361b0817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105958 Malicious code in monetary_starfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12edb021f52150e831101fa7e4134370565b6fb46545405b5f48b9b01af8d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103851 Malicious code in hurt_kangaroo-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d683b52ce308c92bf399a1101b48eaa3e22cdc9430ceb86872392464eed3289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_beaver-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b02981202c9e1c6b1e8634c5e08dbeb96a475e169da325b1d6c69f8f402ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_swordfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf3fb97d32d945c6491b7681dcde1895ab293af81f1d5307b4aa1ca3f2883cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b838c9abb2d5191e27008b985d1f250a5b3654a25c1299225b3296f664a810c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pannnini-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5987626875800bedd975e2c57b8da4f867eeefe7416b137651718fab19d93190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107794 Malicious code in redundant_bug-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5865f75de73e649d39b8d6d911c77b4816f4bd9291189c4b27a44aae282d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_armadillo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61178633290e26f263213e4274be908056864e4cae26b3cc61fb7bdc36f0b22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_yak-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f6d1e82b599b5342c9d4d33e7079dfe1a9d915870dfd415f9e4fdef35baab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_jackal-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f08ca5d149f977be76ec178d42cd13af2f5e92a1a56596c15fe599edbf622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108488 Malicious code in secret_ox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81421a51dc29b3963bcc77cb5f750cd4e5727e2b886d302849328ba4b25becd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111331 Malicious code in youngest_moth-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afa69793a4fbc5f64685d25d91fc8e66be3298a9bc6a40a0aa87fc34ea68ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100929 Malicious code in continental_hawk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdec65970d07ba099171b80253bf410a2f0b5f706a25fe8daca108f3ee0f41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99355 Malicious code in alleged_gull-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc922e8b403b1aae352bfc4e52c0961256c4fc2954b3def44f5ada09a3304180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111034 Malicious code in wqajsn-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723155d3245a9b844d7e2bc56ec36ab163dd0e28de459f671c5c76156ffb6210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...