MAL-2025-107103 Malicious code in plastic_dragon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85dc0a27c18cf6ec3cfdd72c68321bf2e51f654f77beeb514e160faf55d56dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109433 Malicious code in sympathetic_dragonfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72e6a178c2d4d1321e075139d6420ef0487534a68a79ef5c5996d592de8331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99096 Malicious code in accused_haddock-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b557d60e01a574f08898bf2919f904cc541321a37e099b40b8347fd90bc73f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109793 Malicious code in toxic_lizard-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77334edd92072bf65b21d715217634f0f6241dfd3257b7faeeee14e9ed0801fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104752 Malicious code in keen_dolphin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5eb19780297a229c2828bf08f781ffbc9b63e4857753507d5b69a62baf415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101552 Malicious code in different_cougar-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5580cb1eb97080fe61c51b2002d58997f420f6d04cb06ea2a4cc056dc6b412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101333 Malicious code in democratic_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3e6ae0c90fb73379f61e7c4e2a3ff80f5a1453007580ba24f093668acf7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104961 Malicious code in kvgnvn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36cdbeda0d18303fa7faa957e12b2621002d5d9abf7093d03701382d25c3041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101202 Malicious code in dangerous_ermine-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b7bd271a80f3e41a951c515e46402452c14d52f083af0a4b7f4db14cc7cbf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101866 Malicious code in economic_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1518607fab29be8f06e4fbca8304dd31361528975bd2ab54c9c407c68bb03c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106789 Malicious code in organisational_kiwi-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9670c133109df77cd940a0270abcf16e706cd7e4897c37a929047fe0bf0e255e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109824 Malicious code in tremendous_octopus-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6549ef9b169346ca3de0a29944f5245423c9b307fd97ef513b36a1c1d0aa6102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110212 Malicious code in upset_bobcat-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34972ab5b5e2b106ac4a9ade92a447aafbd2a6467b9b357ed7a7c8686d3489b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101735 Malicious code in donut-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49baf6523329832c4696b711cbaab5fad85e5c152f15849e4da1c323535a28ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107108 Malicious code in plavuf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21753d215851f924f511af3e6d57d46b9139bbdccc1a97bc916207c1e730588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110084 Malicious code in uneven_pheasant-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d2fa98ad1fb178074185007a77c63c0aabd28df1d72ef807139eeefed2c549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105939 Malicious code in modest_squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce7b26daac90a8e4a2666ecac25422aa4fafaa112fd9b66120bfcfb105aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107874 Malicious code in reluctant_krill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a30d54104aa024b63c26c98c8276a005220afd809994fa25ea39d40441a4088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111550 Malicious code in zestful_swordfish-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8321a931f1e1507c610b936feb05c83a38bc04bd45e6ab9ddd4eb8262ece7408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110227 Malicious code in urban_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a110f635b769e91fdbf785888354f84ae408eaf237f9391320d55c3236a4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...