MAL-2025-107746 Malicious code in raw_scorpion-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd5150e68baf2190448387a714a50aa8ffbaa86ebd5590c183f26e90f2ec2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99370 Malicious code in alright_ape-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cae8f3e3191b59864b73325e571796670d29562d33e76188f9d2ac94ccf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104527 Malicious code in jbeeec-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350b81729ea6842c05a3217f0bcd4b55d32d729f15750f5ba07581ce306f91aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99614 Malicious code in artificial_goose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf939cc1e192a76e3e99e7b73379841c9e203fae315c1282394cc0f8c1a6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108468 Malicious code in seblakkuah30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37575cf47ec67d4b453b4fb287507572be1521bd1fa9c3671216b0f471641a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105646 Malicious code in marxist_sturgeon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5744873204580592871c4fe41b504defe00fbc009c7cda54cd08c3b52fa0f210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105257 Malicious code in literary_eagle-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8fc5f394ab8db5f17ab1629d28ab0bfaa8280b4b7df7a109e2e383fb597886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102070 Malicious code in empirical_hummingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5bcecbc66bf50eab70ebe6ac88e27a2ba83b32a97db59e604e7972e6776293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99473 Malicious code in annoyed_pelican-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f81c3bda732c1c16ce0f2cf38c744ae50441b35c6920a91e8ce34ab59c937bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108477 Malicious code in seblakkuah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d71a6227d813543877f86e6253c8316a6c89a1c78f019e4aa82d3d6bb60dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99061 Malicious code in academic_mandrill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9aaba5eb1327b851f30f02a0d61a6833aca93c6f445552232d67e9d347794ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107076 Malicious code in physical_possum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef7b1af2b5b189e8f2f234b942b69fd165a71cb1b4bf8bcd44186779b4a0829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107245 Malicious code in previous_cattle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ef8c90f31ada47c69eb2d431fd910f4b9792ee0a40759525b665e83d372a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107135 Malicious code in pomegranate-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9626bc401b942c8814ba3b920f1eb300ec76318d7ab845fbda660bd05be931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103073 Malicious code in gcrcsr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ea6a7f29b8bb81ab73a8728c4864bd0570ec35f18bfbe6ca28e3f211ce5e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104531 Malicious code in jdghrd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7aedd19f7c5a25a83995947f99625007e6a104623b4e65ff026bb3ac9dabad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_partridge-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972185395c1152fa0b326b8a822736abe6126b8ca40c1cc6d98d669362b313e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_ostrich-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501902cb9cf8b8f609a72e1fef5a25bbdf9cdd558942aeb87ba522ed4e2b75a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little_swordtail-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d8aeea9ad82d3bb6f5c9197ae048e7d415a27c96835cffe70956e38f4505bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...