MAL-2025-106885 Malicious code in pale_horse-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e759240f4498bd947dffd1db436f1ec4344498e58e9c5162b8da111b1b462b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110089 Malicious code in unexpected_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4d813b647095d65ca18099aa34ba7a1319cd76d3d5f51802d132eb732546a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crphxc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb616c33b33e052680fada7761cfa28016710e410f53c3f390e99e46c340a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_sole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd98c601f0f1f3ec534b094e9102aa145f1041cd87045b74e24921f74507656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103723 Malicious code in hislaine-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001ee00143f12e0e477cf3c6850a1852dcfcc0970c515f2eacf940fcc6b1465b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106269 Malicious code in nervous_raven-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2437a42f763e86a16bc74f752b909ecdca906a2703f2f9795d63d691105701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99679 Malicious code in available_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9160c77caa61d193e3dad9fdb3f05abb3b08ac3da04c1844eeb41b82f7cb9d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109441 Malicious code in systematic_pelican-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dad22e9e9af84ae0a0777e25c350a282e218af543c9cda4965e2793c82a4876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc37128344b98273f1b26c2ec4177469369d75da301a610db68fbef80b6680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_swordfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24440c84c3a3231183885bd638a1a4e4c4c3d9ab64d994b4c56476f092118362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_wolverine-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affc4b1fd995e21cbc3726793af8b90f1ea83db51b0c9b939f78d8f2ed831672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_primate-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1be10705b41c68d6b49d85ca9b9ce677b4e7dd0338964bf76505573d3aef91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107015 Malicious code in pear-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2a70fc28f45b7322847a42b099d5273d81d9dcbc01b51746675ef976ecc375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110171 Malicious code in unpleasant_crane-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3080abb95677c2f2a3da7939194863e7ea331fdc7b4d816ab66c2810497f3b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106795 Malicious code in original_grouse-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f82166482c28a4efd75fea752d02c7d12ee91e98332816ddaed57fed05ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12382e649cf8256861890c8f34055f504b07e7e6becf3790d9dc1c660e2b8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99992 Malicious code in bizarre_catfish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67a4556f857594b789f2723ac4ed30d0d629ae30aeb5ba65df397262cd561b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104839 Malicious code in known_bee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84351eb3a3e6f98bf996b2e5226000833a80a25cb890e1b0fe27a15ac20c1e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108806 Malicious code in sleepy_kiwi-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b033d640c89638d58f08e044927d44c7078fc57668f828604a9e92a566457811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107248 Malicious code in previous_quokka-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293bc888c42ce59c4c84449f6e5d9113cb62d1b8ad60d7d61f9bc47d85811235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...