MAL-2025-100256 Malicious code in capable_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cb633336d528a55a92a540f7ba793db0e5a8d17369e97c289477e227c8aa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100083 Malicious code in brave_booby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1afd2e04705548b79b3516eda579e04bd49f9d54fac21a43ca78ff2450e3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101776 Malicious code in driving_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50e6b3e3c5b60f1f4f5f79e58186b04e68996220f3ceae04d4ba14539b51209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104060 Malicious code in inc_hedgehog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c0d9d6ab51bc55bb987929c54cd29bc21b52c67e387f5104b410e79d241708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b95cb2436256624efe377a48b49b19eaa9684a06bece6045bf44693b0842c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103611 Malicious code in harsh_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b3eb354993471d21600a2f3ea8a3f93565740ce68508b28b9b05f6fdf9817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110641 Malicious code in vulnerable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2948cc97c356a5a7f5adc682c72df54b36f92cef979516e7001104a3a1e253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101586 Malicious code in direct_dragon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f48430a32dc0bba6767f33771065f5a9f59fa18cebd39cc88e5bc3daaf9e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101756 Malicious code in drab_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221e630578f4e1af20cb3c440919032e8bb52b2e3d21f3452722b25c346f5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107224 Malicious code in present_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c5698fc00ccfbf5aef98e9ca3dc66517161f6099f11a740dfc4eca86872944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105733 Malicious code in mean_lark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d101ccd6290ece07f78f2f98c79321bef969acc84f82efbcce7994d7279106f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...