MAL-2025-100742 Malicious code in comparable_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a299adf417b6672b6cbe894a1c36492c9f9cc7056338f316e761aae8f900597e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104237 Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103099 Malicious code in genuine_herring-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d29369f456300a389ed83a5095cf4080e0949835123621b77fced63f079cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108343 Malicious code in salty_sloth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdf2786216aa2e6b70e1503d508b4456b27325a9e9b12a04bf6eefb9dd8011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108859 Malicious code in smart_coral-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c72dcfd5e5e04931e0b9a90dd6b39432b57ae85dd37378c6e922d8743ca983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102869 Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103250 Malicious code in given_goldfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198789fc48a1b491f7f959ea930c00345c5b21b97e509db0c31610025594b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110247 Malicious code in useful_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849f14a16db32f376e87c29a4a1b7eff27892636f92c955668d2e772f8f4e19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109318 Malicious code in supporting_crab-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09daa3ced0b34997cf25c4a9146f0d16bda4ff244afa3b71d2087769a4dc742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109895 Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102404 Malicious code in explicit_marlin-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6c3cbc08c4102a42d3dcb77297f7cbfcb3ae7cfae4e1d163b3635ac412dce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105110 Malicious code in liable_ladybug-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8c643afe39a6b39ccb891bdbaff93ad876847ba2c66ae0304ae57624431e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105107 Malicious code in liable_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c00acd570e6ebbbbd1a9e0baf6c3ca0df37959b4a42a4b76512d3aac6e35a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109042 Malicious code in spotty_orca-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cb2ee60a2492fa0868cc9248e5c0b5e4755b6f660810423e4655bc066c9ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107647 Malicious code in quick_lemur-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ee011a57b4701dd80029add01d2587b9572adc2baf60cd8e64ff0dc5cc30d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100656 Malicious code in collective_earwig-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cc041bbab6edac657fc6da01fa4f28776910f6440a79e5327b446f579ca55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111137 Malicious code in xzepdx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ad549d13d0c3000aa8fbc845df9d5c6c4ae172a425d025433c4258449ad255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107355 Malicious code in proper_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c756bf683dee1c6e54a5e8ede3dea5419eff438e3b8e7235696a593b9108426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99210 Malicious code in adverse_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abaac2a5a0b8170c56d41f2f09444a32dffbdb8fb3e10fe8f927add3e9653c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...