MAL-2025-103308 Malicious code in gorgeous_landfowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc3ae3c2ec3a338fd56767d0d7d3f40eed6fb7c95355c8ddd5cfc582a4ba541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f151b915315a019231ae30513d50f05ba754f16b2401d5c525a646339dc474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101037 Malicious code in courageous_barnacle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608d8a963ace46225032f6bc93aa2099a9a7511110e77c73b39705036ae6c090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102988 Malicious code in funny_hawk-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ee3e1dd0779e50f9dd1d4c906108b8e202636e41addfeb96f5523eb2fae4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5fa60adc51be9cd0e818a27e0e00e26ed99341d65a225f8aa010eeab5efeeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_flyingfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f1b54701e5bf9f2cf74bca08a4e75934d79c9a68026885d76344b06b13287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101786 Malicious code in dry_leopon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a198469d162a2dcd44a241f4e10d7dbbce82d064e1c9e49aa1ed1d0229cf904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106925 Malicious code in parynnon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3537c9a87dea1ba7d98d604812925c145cc445570be053b36989ce0bc47550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106774 Malicious code in ordinary_lemming-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eae1c2c04f0ae9b11307e115a73942b919ae5b889e5106e122f4d27dc03b9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110212 Malicious code in upset_bobcat-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34972ab5b5e2b106ac4a9ade92a447aafbd2a6467b9b357ed7a7c8686d3489b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107242 Malicious code in pretty_swan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43c9bd88202ba76736996e859344c97560a9e71ba2e858b704a3d071ff62367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108211 Malicious code in round_caterpillar-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea51fa40838fdaa724d58e310be82239f89babeeaa9d3134ed643856cab96a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100007 Malicious code in blind_chimpanzee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf0e4fbf0d2ece0ccf90aa0615bd10c16bc132ae751a5549c19ec9df1296d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_guanaco-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec3822199c75451f80f4a1485cf578527920426d9665af176c21b88d7b019cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853b680f3fed915dc55d32f04bcef9714b403ad88fd97b4d9117fdea8b176e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_boar-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6402d025c9314a86b03889c16d635889a04910cc0c05ed826ec2811ab8fa8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_squirrel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc4033879e107d6fa31d0944fd39d07e95c8ea197d60200fc38d6e37a872661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_clownfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11f725be6182d3702517f2cd300b7445852b00e054928fc5ae4ec07b457d52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_nightingale-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b87df0a06e957d5a6541618dd77762562aa157f49638a872696e9aaab8f442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102366 Malicious code in expected_squirrel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc4033879e107d6fa31d0944fd39d07e95c8ea197d60200fc38d6e37a872661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...