MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105595 Malicious code in manual_gull-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b762c251fbe710e2a20f5b7ffc78a3f9be6663db39868877c4691e4952b1c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105613 Malicious code in marginal_impala-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1ede95c1e6dc1a3bf63a25a720a5cad5bba329f54c3dd30e16930b505b4b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111280 Malicious code in yeasty_gull-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a106c91eeef486b4fd57ce11b3cb6372b617a61e1716cb326f88b4218c2789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99489 Malicious code in anxious_antlion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006f98c55a2facbfc1e7762026843f7513f3530e900c42eca15b18d8eb212bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108153 Malicious code in ripe_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d38c12ab0650a5c44aa1807956ab2f2dc0bbb79291b315a229411c3168a8a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102596 Malicious code in fat_swan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a69a24efa7b9fa9f2121b67b1ed22470902d625c5f05e6245eb64f47411980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102364 Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103771 Malicious code in homely_smelt-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49958b233206364c2009da63536f648a2d939214ec931f6216252dddae746411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107189 Malicious code in precise_gazelle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7140bfbaaed38281216745d86bea9c04ae36fc34bb9a3896d25d9ba9dd50183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105921 Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102413 Malicious code in extended_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6f114efdd2ae4b95bf801dd548da15713dc6aeff639ce312d883259b0576ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107673 Malicious code in quixotic_cicada-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a7a70b31b4f0f551b1525ff12f4120e12df3540be2f9efb5b319ea64c3bd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107138 Malicious code in poor_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7e1f56d603cfa59458eadb5ddf8295463f501d7e1e56018c37c5f4373a384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111507 Malicious code in zalren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610fcddf2ae7b37edc1ccb2979914e71bfd1074800b40d8cea35fafaf58c4f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102053 Malicious code in embarrassed_tuna-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da727474b13261f3daadb49a4acafcecf43942791bab95acfc11968e2495e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111565 Malicious code in zonal_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c41d17cd395f24cef1ba920896bf24a416590555e4deca8ba19684efe8d7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108540 Malicious code in sensitive_cat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61a857ecf93af12ca321d328488a53b1196cd7039c66b40f8b4f02a00b7d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103432 Malicious code in gvbhps-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a735a8cca8e3e69b26842978eb87883829fd9eb815a25a4f9b2686eee76ec10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109894 Malicious code in txdejf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a081ee7606d72c184766d79da2c2d45bfd14ea4e21ea513b8e52a3595d821adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...