MAL-2025-105921 Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99030 Malicious code in able_flea-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f899daee0c4f4c55388905e2e925d44a19cf016306c5ece9135ed2a2e6442cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100579 Malicious code in classical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33dc9e42831c51eed6e3eaf32649fff24becb009f36564575a2c2ead8b0d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100001 Malicious code in blank_tern-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4df4c58f7dd068e3b31f86cdd892beb68ca48cd84bef7abda868bf9a41321f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_mastodon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23766432618c03d96f4e0617741cd78ac7b03e2b8bc4907f802f432ca784381d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110039 Malicious code in uncertain_rooster-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c252404069651b8a11c6d81ee6a5eedcf8d645d5412342fffcbabdecf3a171c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104828 Malicious code in kind_pike-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c5803ed64f2c9e6a484f8c4a026d7f4c1ce0cec8cb26711afde49c19541bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105757 Malicious code in medical_partridge_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04867bc58acbb95ae23b9df2cc1559d43e5afaaad4ec30e4ade1e7609fd0af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102737 Malicious code in firm_cheetah-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0c061b3177757ec9bd7b0f50a90724761c02c59a457570ebfa8e23e41d1cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104745 Malicious code in jzonki-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bde1c2d7ed3662f5febe38c70fa745ff8132d2665ad874fbc7bff4841340df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105769 Malicious code in megrbz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c50e68545e93db6de7eba15af2d2b51ef4f93b1c746c85d13dadece3a2786ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101047 Malicious code in cranberry-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d304027659209740433caf4910ee8ca8992e7b482f001e49c6e9496907d7309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111507 Malicious code in zalren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610fcddf2ae7b37edc1ccb2979914e71bfd1074800b40d8cea35fafaf58c4f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105939 Malicious code in modest_squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce7b26daac90a8e4a2666ecac25422aa4fafaa112fd9b66120bfcfb105aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101754 Malicious code in drab_chameleon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e614f521ca2d6cab338866718ae98858bb070e09870fbc2d963c00d26affc74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_muskox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e244ca0f2afef9e53c62e62165df3b9c142bfe670279ad4d401c3c772412a6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111565 Malicious code in zonal_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c41d17cd395f24cef1ba920896bf24a416590555e4deca8ba19684efe8d7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102596 Malicious code in fat_swan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a69a24efa7b9fa9f2121b67b1ed22470902d625c5f05e6245eb64f47411980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108699 Malicious code in similar_tahr-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a3c46080d82eaf0779f262f1643b5d4efe8f9cb24823545a6915d09b193810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...