MAL-2025-100784 Malicious code in complicated_gorilla-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed740e1d2ccaaa6f76e4e85b2ee842d313dd58deb202bbf130d6cf898ac54ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109096 Malicious code in statutory_locust-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e758dfb45b87b83d08af3faf2f32c255c16e47d7bc435cb87bea12dc64075fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xskzwa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b760edfc3ffedb344cde8e305f57a9f3c2d84b0c080e9568c52379ceabd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hnvbvz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ec5a62328465134436b6185993cc8312f807b31e246e9662c2a783c50cc1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_chicken-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a7b237b2d1de85d94330018f4f47ca0a2cbbadd946480bcb691e12a2760ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing_nightingale-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d27c4441ffb3fb8fc76f37fd80dc9519a655381c2284dc58c747444bad21d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kvgnvn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36cdbeda0d18303fa7faa957e12b2621002d5d9abf7093d03701382d25c3041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_skink-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a336ccb3387bf0a93b67abc396cbfbbbae7b33c202d2b0e3db9a7298afe35438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in razzpj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcdbcb3b0ef5dd617104529281a275ff9014519508a3bf467d95bed34cb803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_pigeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4055d931c477e9d80fcd3ce4c460ce34d0d9c1ebac5cf3ec660981be52c12a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c9a2cfe217a93889d90c1c5185b5647e57c9baac9ad036aa2232ed174c9bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99067 Malicious code in acceptable_gazelle-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558cb76a42c854e48f4f81f70a54a66222f64bd9e32e250b31314761373457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111281 Malicious code in yeasty_leech-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eabc5eb0c63c45f97057171d7fedb8d450081042bbfaecd50013e36c7fa9898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109516 Malicious code in tasty_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56c4435f0cc0645e8f7e2d344fc9b725dcfb695b596464d9f1cd5f463912fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107429 Malicious code in puny_scallop-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9739ea323487f99668ba950ef761ec6ac4b5cb1f94302a32f287b205b319a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100861 Malicious code in conservation_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158c92186865dadd98a6d892e676fcf28533b2d3168c9eb7e5adfa203ae1bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105911 Malicious code in moaning_macaw-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf29b3718cc11536f84468b744dcc2887de9451d3575e6bd84179132fdd7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104228 Malicious code in inner_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ce9840d615d84776d0401eb6bd00b5c84e23540e71084c0803a9ba6468a143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103795 Malicious code in hostile_bison-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43397257d22d57d295e74912864b4eac20810e8ff07392a13274378ea78ccf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...