MAL-2025-110079 Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102879 Malicious code in fortunate_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1b17f0089f09b2b0e23dd44e5c2103c52dbddc2d346186e9e3dc3da7194e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107792 Malicious code in reduced_porcupine-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f235df5ef4ca9073904a3af69e804206ecde2578b6e521d3b00fd21aae14693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99067 Malicious code in acceptable_gazelle-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558cb76a42c854e48f4f81f70a54a66222f64bd9e32e250b31314761373457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_silverfish-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d915d00936e1ab18761c24bc969630654ba3337a5d5fcda03bee9f1e25e64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101502 Malicious code in dfgerc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c650a09be866cbb516e8c5a8249ec18ee0ef2743e1a8c0022ab5a9c155547aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99343 Malicious code in alert_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3b61dcbef9a67749e2788464d73e9120c2b2a0475c3c2192a2d878eacdce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_earwig-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e585ab8df4c3bf7ac14f8b50e67986e482f4726bffd85cc8f85fdd62f3cc6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm_panda-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce3f1e01f1dc8a0c517ae7c02e1359fcf22a88d5c3eeb2f42b3ce7b55081519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united_worm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101199a566bcd62c51b9ed56943eb4c98554766bab913f973e538ae38d109003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104835 Malicious code in klred-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2e966f935a4c128050bbf3fc2f823ec301a1823b185e6ac50b0a334b60dddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107657 Malicious code in quickest_woodpecker-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f592df82d9c0671aead367d26cc922ace2f2719654c3f1d233355473111e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107355 Malicious code in proper_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c756bf683dee1c6e54a5e8ede3dea5419eff438e3b8e7235696a593b9108426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102665 Malicious code in fellow_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefcadc74b89fd1f0ae6d8229c13775d3d19d8ec5f086e57d939666cd0b2bb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108702 Malicious code in simple_orangutan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f375f63464f5f0397e536f0cb4c9c297bb3b182ed84f644406e11565f963c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111306 Malicious code in yloomz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b350257634b6c9a805ca7a5a4e42f3f07237f9ff2db3db0b393aaf8d62c8d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105629 Malicious code in married_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2380441d8d986e0a79a5afbb302b06fd34ad86e0c8ea56a2cf9bdc884f44e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100279 Malicious code in casual_halibut-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15441b5f8b15df81efd124b66347bfc2a8cb5bfade06b3ca8ac85f688ca4893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106211 Malicious code in naval_ladybug-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c3c10bacbf7eec25832a25b240b55754e1c6d4795ea1d0f5d0e8e8e3dcece6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...