MAL-2025-107319 Malicious code in profitable_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde26b132991696977fe5a2beb2f7dda02fb106e7fd08d4157047a4508c79a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99985 Malicious code in biological_xerinae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a838841b1f6e2f1202ec26084b7df541dc97f3484e835f16aa3f66f6c61c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110915 Malicious code in wild_krill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d06ce32c22adff95bd018f849a1dcd2322946bb46d89584ea5b5995acff6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103321 Malicious code in gpneff-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43b2ba47bf5b77eeb61d3e4a864be862822dd44a75c39b0f45668de31e4f00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101383 Malicious code in determined_wildcat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55797fbc4e74499f6d13a2a3afae7739d129cc1a08b2178b71321cf50c43acfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106281 Malicious code in neutral_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37159454b70f61d5ad89997f1f8e0d6395e89c5f5dfe254642a9eb6ed4521fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108167 Malicious code in roasted_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0ed20591016b7151f39bae20cffe4ff84d5cd95d8328c79d4cfb3ff5ecd189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104434 Malicious code in isolated_koala-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef8ab118f1fbacb42d6301aba6142edaed229e215b7a8b094c1e78c53032aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106619 Malicious code in okay_goose-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9329092cf18a2437da08eca18e140b576ecaa45ee28f9a02b1f933fcd36eff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teriyaki-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fec037e2b3867366aa0087cd42cb0c63df17495c0f3c7f90f6e6413bf35d773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1370fc4813066876be453b2f883cd255542b6c297a65e9b006e076b81100c339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99679 Malicious code in available_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9160c77caa61d193e3dad9fdb3f05abb3b08ac3da04c1844eeb41b82f7cb9d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99992 Malicious code in bizarre_catfish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67a4556f857594b789f2723ac4ed30d0d629ae30aeb5ba65df397262cd561b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc37128344b98273f1b26c2ec4177469369d75da301a610db68fbef80b6680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108806 Malicious code in sleepy_kiwi-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b033d640c89638d58f08e044927d44c7078fc57668f828604a9e92a566457811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated_guan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872047ed8577e44f5f11367694f1b29ad8535a87c952bc4d7467232bf821482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_dolphin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5eb19780297a229c2828bf08f781ffbc9b63e4857753507d5b69a62baf415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clinical_aardwolf-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3ee8b320e6391c3e20ab0c93d46b178eb11558c23b7d05e6dc240600097541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in normal_prawn-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c8271617c3ef1526465d99622e83b89f471eefe8c8c6bec705d951aff41dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...