MAL-2025-110253 Malicious code in useless_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd293afa3a718b2157c4b88f5833746ec251c38995e035bf3bf4664868eab2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107233 Malicious code in presidential_galliform-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2763e3c8b7b8addc3ec82d2fb64072f3538ed13dae3df9be55841c774ea0f662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106835 Malicious code in outrageous_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d0043a9bb02be2d7d469a5dafc447de4700a2f7f49acd7e29273b5f159e24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109269 Malicious code in sudden_cow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37170afb43af219a73f2e93586c1320fee2c69549b380db4f43060a2e2fb63e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106926 Malicious code in pasdgta-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1b02111b1f46b7f86a55f4aae73a04991b17358bc878ab075367171e8e8760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104899 Malicious code in kspapd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbde9b363af18918ab6c3122fd4178daf06e9302a6ebb7c658cad0e214f50595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99504 Malicious code in appalling_marlin-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7806b77711f7e8bc5623a156c7bc15f83d533dd7a60ce2dff195d8dee95015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104040 Malicious code in inadequate_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b63594445e39909de079de003c9978c9d6106d4450b86e2eb3730649ad096b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101788 Malicious code in dry_rhinoceros-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692adc4c2da3f036c519847e0a7334d33e57e2cb648d8d5489bff653dbfe6b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108895 Malicious code in social_wren-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf30509f7d739aec22c7bca5bc62d5573b2b81b394a634755186f49c6dd4845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102146 Malicious code in environmental_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f925795c1392c280541b2428b14c3499279ba366fb2d7ba8e8f0c7188b00b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106729 Malicious code in only_cheetah-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e632b8df3b9aeed038642dfec459ff59268ac472e8105d8386bef13e2c39d6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110052 Malicious code in unconscious_aardwolf-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b39412714cf8343f5465b4e99f9ff41ae58328c930097fefb6495ccbe7f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_grasshopper-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5913304a6a549a1046674e17eefc7f396fde6002c4a38844769d118f98a99692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_kiwi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82828a261f6aaa5f0612bffd4170aa1c4bb5474f24876fcfc984f0b101ec555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bauscc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871e70d844721832122a89e0d14f05fb0798698f5dfc32e109f42b7f0f1920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_dragonfly-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f320c394edd618b612390c46ab7caf43901e16fc07f46570a1a106833b271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187d144403d7d2e7f851d3bfbbea5eb00270eee9ce6014974b60157e24a720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scouhp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d69eadcc62764b8bac9cd2e0763e91cbe3599b01f8ee0783e4c5e6f8fe72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...