MAL-2025-100196 Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101108 Malicious code in crude_bird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce16ff95e3fcf7093434f6e09f7a582534d55a0840e6c3ea00d19898464ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_cattle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc1e74bcae8b6737b74fe10fd12eb1eb39d8015ee94e79a242ad57bd2be4e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_swordfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf3fb97d32d945c6491b7681dcde1895ab293af81f1d5307b4aa1ca3f2883cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_bison-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81990ffe7223c1ccc9081f1adea01c913524fa162df5b63773c31c952e6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_lynx-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5926396abf3b687144e257c92170080e8003c83aaaece2f4ba9169000e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99813 Malicious code in bauscc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871e70d844721832122a89e0d14f05fb0798698f5dfc32e109f42b7f0f1920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100872 Malicious code in considerable_ape-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58952cf78fc5102e58ce44501155c7b26ba92c490c2eb1bbd6b4f3a98d41337d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102393 Malicious code in experimental_goose-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b118dcd7235ebc402257c29924172852bcb2ae66d096e3e3a98b16c4503684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109018 Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105729 Malicious code in mean_armadillo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381bdb43956b46b4775a79e62c414fc663906cf40221da5cb983dbb1c997e1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xhhwtm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a8a9af606fb73d0c5cee40b2a28b2848590a96094e0d1716755f2454e9765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_owl-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f9583424f07c1a42e8f2232eff31760f8efba807236bc70e10aef7ca55a08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_chicken-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a7b237b2d1de85d94330018f4f47ca0a2cbbadd946480bcb691e12a2760ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim_amphibian-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca98c4cb79584c9e33a7c3eac80794d7333477616dd3d2ac900b56c3c8e326a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d8a399f1bcfb7d895b03f1e6058622854c9001db18b5c68ef435959d83289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desirable_yak-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b089e2e029be884e5e751dfbcd77357b6d666d62170f250b8ea9ba21d805da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...