MAL-2025-102145 Malicious code in environmental_seahorse-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c04c442f46c5b70ec278416674308546f1fded098c574be85feb870cf5184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_snipe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281fa9df12e7754978a41d9ad102767489663c182d14c3c4fe597968c093f8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104020 Malicious code in impressive_bandicoot-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e017d3943ebcada222bc15ac81727a31459b5fb2c6acd4774bbc7e95d2fd30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110835 Malicious code in whole_centipede-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdf3f13445d0c2f0dae6d3215bd788a121429caad990690b223070bf5f5a82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105940 Malicious code in modest_toad-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e77864798b0be7cbdb663c89c11eacd5195fd481a2a364ba57dcc9928d994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e60abf3d710f07fecfa4062beb31443935dc956fd2aab8412126defde8795a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable_barracuda-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8c5c3c64d21a80bb3b2637dbf27522cd3929c7e65fac6427c9c167ba90a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imaginative_minnow-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0f1e2bd5c03ce5e3f88cf4565da149dd2bae5d36b49bde453e9418a274ce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101145 Malicious code in curious_cephalopod-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97076dc5e00f1d9d83ed2dd4de6c9dcb0a5a2a997e04939ddcdbf700867e3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0610f878262a93b64fd21657278eb658555bb9d0d17d2e5a493ad09c198b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109289 Malicious code in sunny_pony-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e39871e80a9b83a80235bbd66ee8a0f33e56b9ce502b3dbabb3a6ce48bdb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110805 Malicious code in welcome_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661c7dcf079aa8e3444425a256f53ef2e7afffc2ee7ab3739a7363fbcbcf3320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107224 Malicious code in present_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c5698fc00ccfbf5aef98e9ca3dc66517161f6099f11a740dfc4eca86872944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104076 Malicious code in increased_panther-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56039251f50b4e672d9573b786949de3fc7a83222a5e09500b53270911fb033c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107402 Malicious code in psychiatric_chameleon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54157fa15caf8855a03cbbbea84c3d45f6a3c1a528746ca22115f06bd2c3af0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100256 Malicious code in capable_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cb633336d528a55a92a540f7ba793db0e5a8d17369e97c289477e227c8aa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100787 Malicious code in complicated_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1eeaa5315552c9d51ae052520f0543e9dffd5a176ff38431775fba5ddb0072a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105733 Malicious code in mean_lark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d101ccd6290ece07f78f2f98c79321bef969acc84f82efbcce7994d7279106f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102151 Malicious code in equal_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3e5b8565051f0f29c2989ce17640e6a440e458ab83dd46c303151cb48e5a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100344 Malicious code in charming_aardvark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5798c28640c34510ca0459e08387a063093ec3cab6cf16beedb765a91bff1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...