MAL-2025-101667 Malicious code in disturbed_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3cd29ae5942d5b4a73a84cd53bd0aa17bbc3f8cf2b8e2f7c3856af379ff1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102828 Malicious code in fluffy_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46eb0e2975c949923df1ca46d7200f34f9aaf3c4e98afa9709582f66ff43d5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100392 Malicious code in chosen_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b8d514e5f44a8b5eaf985728d0f80fc28e0f95bd2dbc4e28b15c8327e00260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99070 Malicious code in acceptable_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354e912b1e2c737eb0df3877f5d60c3417a970138b04215d2a24ca99b78a504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103943 Malicious code in iemefd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0bcb5008698871d7fda2ef077151d722955c12ce384d67032375d06a21b87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106269 Malicious code in nervous_raven-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2437a42f763e86a16bc74f752b909ecdca906a2703f2f9795d63d691105701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109427 Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110992 Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103409 Malicious code in growing_jay-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db676ed811b4cb7fac1c1e6b5a6c1892fef1674f8e5f129f043ab47e14f62244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102573 Malicious code in fascinating_rooster-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc801da4e0169249bf81a0b7779de515c671bf89590ff4f1c527b8e657e51048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2380441d8d986e0a79a5afbb302b06fd34ad86e0c8ea56a2cf9bdc884f44e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102744 Malicious code in fish-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46869cde55094b47a8fdbf63532a56f7467f68ad6fc3f2cc07210283b5a365e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_pony-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e39871e80a9b83a80235bbd66ee8a0f33e56b9ce502b3dbabb3a6ce48bdb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102064 Malicious code in emotional_puma-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101781751aa072a0f3147a3579922dc8e7a74c0229b7bfa8b09dafbd5c1b6760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109250 Malicious code in subtle_squid-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9df9a567628ec34313082ee72c83ad136200c823616d9b1531c23b62aabfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103717 Malicious code in hilarious_marmoset-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c26df3b54aed5c3010d0594a83d898e9e0761b5a455797eb2693f7a13b4e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...