MAL-2025-106774 Malicious code in ordinary_lemming-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eae1c2c04f0ae9b11307e115a73942b919ae5b889e5106e122f4d27dc03b9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99688 Malicious code in avocado-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e396a988985df485f505fded6802081038b17755ee3d8ee3f90d5abd251450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109815 Malicious code in tragic_tahr-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9401607d3134607ec47f0b7447958ba983f7032974aa6f17d77d2ca07a43582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105635 Malicious code in marvellous_quelea-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c824126baf2d2952afbe28fa6da7b508f2649f1a0e508303e4cb1542702c501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111013 Malicious code in worrying_gamefowl-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8688549b03ce7fbb5f09ed922ea71740cbee3f80653cffc4b03d99aa0e4dc064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109965 Malicious code in ultimate_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcea628ea409e46815eb4ff96e7ca73104b1d8759b21d8b59eb5b72b88c13f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110229 Malicious code in urban_junglefowl-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83c2ee159da7e3157f71b697ce35458951834668929a996762f86a22d681a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103738 Malicious code in hljwhb-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecfe5e9ec4016f18fd6af0a29de472cd365624159544902ee3fdbe93ee48373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104011 Malicious code in impossible_gecko-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b528ebaf3b67c99f3ef740c0de5c2caa4de404aa765d455610c13308eac40795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108401 Malicious code in satisfied_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a7e07de0259f00597c82ae035d95fc40ded06b6dfc319404cacfec56648d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100386 Malicious code in chilly_lion-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5928e891d1c2eba46612fbf8a9901702a307aa8d6a3e1b7dd9700119ef0341c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102374 Malicious code in expensive_roundworm-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e40d4dd59ce6497e1ae95a347a9cfa40f8e9767ef3e36cf87cfec7f6b1d877a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104360 Malicious code in international_magpie-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969f1c109d83b6c12c6a7451023078643e5be7af6ea287e0123fb3f696a17dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105083 Malicious code in lentengsakal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4941f5d087e195991834e8e21aa63ae0e267196e95417039f6554c1078724a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106615 Malicious code in ok_horse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a34e35ed6f1e00170a43f123ad6712b76757446620213844193940760318161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110255 Malicious code in useless_starfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842b5990384858bd4404b884f5ccbc0a7d581f6755fadd5c9ce56a4da8b98612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_chameleon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a025272232fc829ee221016ceac4ae0c7f300cba39cdaaab5105659199a812c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_raven-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9f2bff9a981281a823eceb2a5fe2949d115bcddffe9f826cd57c7d72aa35fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clinical_aardwolf-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3ee8b320e6391c3e20ab0c93d46b178eb11558c23b7d05e6dc240600097541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational_python-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07057ee54ab66530980519c51a15a6994823646725b6079f264be0535cd305cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...