MAL-2025-107907 Malicious code in renewed_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde69c5d2e56d3f5873f47980800a3e98f264bbc40ed8680b3905b54ff443854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108887 Malicious code in snmtyc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e173ba54505a8f48a2a0b6f008e9ccf09bf0f6103880276e07b9d30cdcaa7607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106748 Malicious code in opposite_cattle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc1e74bcae8b6737b74fe10fd12eb1eb39d8015ee94e79a242ad57bd2be4e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102883 Malicious code in fortunate_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a00cbdd56fc299288391dab85204778fa16f82588c4927ca272745a3ff5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107231 Malicious code in present_salmon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f66d4d2423317b56ea224e295e29f5268064be5219ac4b720c984c2fc61ad032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105131 Malicious code in like_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7611c3525d7d2e5850fb112f18206719901fcd59bb0b9589265a5029625ff6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107420 Malicious code in puny_clownfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11f725be6182d3702517f2cd300b7445852b00e054928fc5ae4ec07b457d52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99492 Malicious code in anxious_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9672b0f74585ab4694b60279481f3d8323cf680ec904e5a1f559d9b7cbff951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110777 Malicious code in weary_lizard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc03fa742f8a9d9bce88dfb9164daea6e02bf087260d6538f11ac3d7037a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cucumber-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9469ff490246fcdaa28a7eb4f8897e226d47ff6afac1230a30c84c6d56fbf4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd4a2ba0e12efd96824829735cd7b22c6020d6d01623c8254ef917d03e2f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b85d4adfa4bec9ceae7a72a3a6f512d035dbe6723e147b142d142b6f2f864d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf40fa4f0a0d967826c163ebc922c59ffcf2d424ddba67217833ea895394431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prime_cuckoo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06623d98f800abb7a70b175e619814764b2bd242d10b6866a8eddc553bb656ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_camel-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ebc5b61f7c8bcbc5014e3764971c615aef6c5d03a710c069e3d2c24ee958fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_camel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbf38b3260b7ce226e433a2c0ac5cd28947a18c483e4bc7604553915227fc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8b6e4c6c213493d8917ef587da991fd16a051ce4d8ee6dd2af1ed3d9e26092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_koi-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf3d29fdf11b920430d50fcbada22f3a6651e3104e203d0003c3cdee8ab1d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...