MAL-2025-108308 Malicious code in rymzol-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53394981458b70e8de67cbfddb4424dfd2c836474a9022650968d4f02cf50e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111246 Malicious code in yappy_salmon-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60098d8ced04be8f9adbab6ff4816ff61e49fd65d787fbb67a50f800fbea911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104040 Malicious code in inadequate_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b63594445e39909de079de003c9978c9d6106d4450b86e2eb3730649ad096b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108216 Malicious code in round_panther-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009dc36112545337483478ef6de082446bb0bc324e0e5d2d96570fd232ba4c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107270 Malicious code in primitive_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58173152257487fe7da75c057097674a036c7ad64bcc29b6e76e9a2ef97b40e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101614 Malicious code in disappointed_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb68ad302a3c0d8077b28596e03e7c25af88afa027e63ff036d25d5b71d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100413 Malicious code in chubby_silverfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66345e7f35162cb5e3442aa40a94dad5535e6a1012ad4f40d01bc4e8decf409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107157 Malicious code in possible_emu-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1b288ebcfec1ce5c96c3b18b5d076cbd25497799f9d3fc1034ab705a6da553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109908 Malicious code in uathal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52b70d19ca5e35a5401145edfd43e4533d8a76962a54e6429672ce81edd06fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101983 Malicious code in elaborate_pelican-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d41aa0e2b2ac4ec68a180977ebc14e154f3daf7e09154b83aa68d6d5cbc659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100013 Malicious code in blind_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d8a399f1bcfb7d895b03f1e6058622854c9001db18b5c68ef435959d83289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109947 Malicious code in ugfcox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3674c668d9ca8237d18b33e7ec8c3baa3443e24d21907845d2e5ae9919c86c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100275 Malicious code in carsfrot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69dbcc25e94793736b4d945872b6bd7f8c3e0a6fc44077b0bdff9bd9e185391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105600 Malicious code in manual_woodpecker-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945457998bab5e732b1a9ac081a3c6676b4ea45843eeec6de97ed6c7605255fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102086 Malicious code in encouraging_dingo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af3b98bcfd1a5e19aeef1c9740a2d8fe236a50d87ad0cba8af6ef8ac35dd8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106239 Malicious code in necessary_echidna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ac83881e6e2cecf2c0fff680d00aa02e5c9534c628c583313fcb726a994132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105737 Malicious code in meaningful_barnacle-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8fda1ccd3ff68069e9b46039545ad6df2ca09bf48a5f656e5228140603c209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99028 Malicious code in aadvuo-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72414ede87d85a018fc1d5ab288f9343c655a0a5fa2af33ae4367cb593598586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110217 Malicious code in upset_snipe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af43942ba047c63ecff159e836abfce2a3d04d0f34758d2087169befd75e771f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100996 Malicious code in cool_loon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d0b033497d43c8446f8a697d320e3c5bc596f1fc79dbf9c74d79ea1e7efed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...