MAL-2025-100656 Malicious code in collective_earwig-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cc041bbab6edac657fc6da01fa4f28776910f6440a79e5327b446f579ca55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104237 Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d925934a165f69e2d8bfc990dc54974d1ac6784fabf5ff8454d08df17cf5527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102869 Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109023 Malicious code in splendid_wildebeest-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8779d3072ff87263c7668cb4f101845d809615c1fe38cf3da88c39f9e6dcc093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103099 Malicious code in genuine_herring-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d29369f456300a389ed83a5095cf4080e0949835123621b77fced63f079cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100742 Malicious code in comparable_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a299adf417b6672b6cbe894a1c36492c9f9cc7056338f316e761aae8f900597e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102404 Malicious code in explicit_marlin-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6c3cbc08c4102a42d3dcb77297f7cbfcb3ae7cfae4e1d163b3635ac412dce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103250 Malicious code in given_goldfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198789fc48a1b491f7f959ea930c00345c5b21b97e509db0c31610025594b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107647 Malicious code in quick_lemur-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ee011a57b4701dd80029add01d2587b9572adc2baf60cd8e64ff0dc5cc30d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103306 Malicious code in gorgeous_beaver-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c8182fa8d975a1c38ad97aace48b63fec77a52b17f69efb076f4177e49b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109042 Malicious code in spotty_orca-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cb2ee60a2492fa0868cc9248e5c0b5e4755b6f660810423e4655bc066c9ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riswold-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddc0e3e0cbcc9184588ea8974f733faaee20ab4813ce3dce7f0aadb882983e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103359 Malicious code in grdxww-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca12954d422fc2082858d5e0b104710ebb72604cea8048dac6de690a303bdd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102334 Malicious code in excited_earthworm-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c83cbbf286d8cb6cb478ffe632b4b8803166e5827814c637ec3d192afaed36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108476 Malicious code in seblakkuah38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa473da9ac2c08ab5696327b9acd4c06c0eabc92ebda9a6c11926ea073eafd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100735 Malicious code in compact_rook-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d989229677f79a8e13079ab8345d0f7552831845fdd065378ddb6b0654e36b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109318 Malicious code in supporting_crab-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09daa3ced0b34997cf25c4a9146f0d16bda4ff244afa3b71d2087769a4dc742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108859 Malicious code in smart_coral-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c72dcfd5e5e04931e0b9a90dd6b39432b57ae85dd37378c6e922d8743ca983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108343 Malicious code in salty_sloth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdf2786216aa2e6b70e1503d508b4456b27325a9e9b12a04bf6eefb9dd8011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...