MAL-2025-108527 Malicious code in sempol-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814acb7a9f39c0d382d6b0a45eb732fb1d39fe4462cea87d7aeb1facc6e2d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104180 Malicious code in inevitable_kiwi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82828a261f6aaa5f0612bffd4170aa1c4bb5474f24876fcfc984f0b101ec555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109856 Malicious code in trout-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e3abde3841ca1f5d9b558eedf718fb5c56ddb3aba000834ba5193788d93c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110463 Malicious code in vicious_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04534a82b73104550aa0162f541a2d14a0e295343beeb998d021a717940d4e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102407 Malicious code in extended_albatross-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330d4e61fd19e249297d261057d3b6374aed4612e712b71246dd03dfe1cb8297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108307 Malicious code in rxlfdd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0044323f46d9734568151a5a4cec8c11a644b84c1615bbd9f7a4de805842a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102007 Malicious code in electoral_lion-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27cbe37a12f73e4f849a72de1c96a5db5a0478a854abc88f8ada4cc6a6211076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109796 Malicious code in tqkmnh-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f7daf9891093e59791356261992d62bab3a9ed1115e4c168665870d470c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111048 Malicious code in xaajpl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20f54cc9d892b8dd21ba229f4c1039bb3e6217c8062afdaac110f601905edf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100063 Malicious code in bottom_lynx-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e658facf4d728f51f605697e8554c9c743a91242c1ceea5c5da23a052c634d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108443 Malicious code in sdsowf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b61ff263b80c858b81a473d25ed3f0d9683252181def915c1f702bd98f124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105946 Malicious code in monetary_anteater-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009144345e8236c56df9c81cb2b11ba971f3ed88d49d74021f26886eca081f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104561 Malicious code in jixolx-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63022b3d0559fccd0e1489b5112e42366bd0f661e973e5b994e3339cc39fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100029 Malicious code in blushing_gazelle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac04e79b7bd0692cfa4289d4bcea1dd1aead67021ee8d8ef57acc9b0aad73bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108480 Malicious code in seblakkuah7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368bd047c7b4d0bd324150b587575d54dbdf97af2b79f651259e0f4105ead901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_ox-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af4a51bd3019769bb4bcdea5bafb2c10cbc260bc2588544cece2681e016dee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical_damselfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7915918ebb19b20a194bcd886674db1e4634f0c2cd21bac10929285249418da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_hare-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9967e17caf0bcc9f105f85d160bf9a59eb6f7c355b8f72de847092a1e316a39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9100b9459f2da14adb18bcc6f905da9259b97be4f3c1ed8fe124eccd6ae50e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled_landfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dab1dfa837847e64e70050db6ccbcb7fbb18ef63c85c50f8f4a606ace9c87c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...