MAL-2025-107256 Malicious code in prickly_whippet-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd90f250a331a33ba5dff7ecde2167dcb27a6b933ca8470c3548a7b4601e87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109517 Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105064 Malicious code in legitimate_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3847c75d0f326c4e649811c51f7a1986553d338d6bc1fbb1c1f754cd84f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110455 Malicious code in vicarious_dolphin-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd1797d414126cfdaa7cd3be716a657324d0a5fb8d73cf2446e289bb959eb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105930 Malicious code in modern_gorilla-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aff5fb4fa17e1200b3c6761c181669961d6cf150c4e1f7d32c394cef8471aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103711 Malicious code in hidden_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc28685cd763c2b89cd617f71949bcf9d6100697ec78ba07e7e36cebb580726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107437 Malicious code in purring_mandrill-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1843e02b4a3de92299d99217f921a065938bd17d84087032964d08674a2cc286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104543 Malicious code in jefqob-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a513142074c91b06eb3f1e9ad7e1084ff7e706cfcfd1ba4eee78a36a4e86853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107404 Malicious code in psychiatric_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b49fa6893ec55dce7cd936d224cf65d5c01df3870bb5563ef068c5a6dc6b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102026 Malicious code in electrical_haddock-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84223d34bd695e5cadebff44dff68d145356df1eb4e36ed0ecf9b714d1a51aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102916 Malicious code in frequent_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75af6780550c1c6e47c55cb1c9e343951b31d679f40b992611bf355116fa0282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109815 Malicious code in tragic_tahr-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9401607d3134607ec47f0b7447958ba983f7032974aa6f17d77d2ca07a43582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105677 Malicious code in maximum_roadrunner-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b061baac98079f49d88d37e36e474382503acdda97bcdd425eab994134ad42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101781 Malicious code in drunk_hippopotamus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f99c5a61a7f5017d15e5a03ad75a161a4e82acdedfd79a0d8ac2f8e605ec4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xhhwtm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a8a9af606fb73d0c5cee40b2a28b2848590a96094e0d1716755f2454e9765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_echidna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485773f74deaf4f26543fac3d4d435274914f78bd579e19b416723fab9e89034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2fbd920d25e78c569ab5bb5bfa41a7c161829bbc20f630b75d9f1fe4b74d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_armadillo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4838da5ba768ebb4a315ff2487e9945d4e167d6ee7dc902881b97b74763e721b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_damselfly-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de4fbe6ba245d6ba9acae044eef9e9d60f1dbb8c47212b835aa2aac9d7fb4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...