MAL-2025-104720 Malicious code in judicial_flyingfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d61939e697f21b4d830f3670ce2463742855aecf639743eb7225151de79adf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106270 Malicious code in net_grasshopper-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2bd79c83056c305748de73f9c7b04714d8f558de9d7df2295caa3060e5d790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107792 Malicious code in reduced_porcupine-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f235df5ef4ca9073904a3af69e804206ecde2578b6e521d3b00fd21aae14693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108702 Malicious code in simple_orangutan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f375f63464f5f0397e536f0cb4c9c297bb3b182ed84f644406e11565f963c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107657 Malicious code in quickest_woodpecker-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f592df82d9c0671aead367d26cc922ace2f2719654c3f1d233355473111e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107909 Malicious code in representative_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c4008de520ecf1f65f5b7884da548f80dec1738901edc2487ca5f22e51931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100105 Malicious code in bright_hedgehog-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e25d5250f70b5778474bb68fd2fa93ddda3b88eb0c2e1d28d530d1a8360b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107100 Malicious code in plastic_alligator-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99c0bce27d616eb61e7ed66b39fc84348b08122c6b943a176da7483521f3cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100278 Malicious code in casual_dog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9d0fd7ef22d1aeb8f6e047a45164b39bf525ea1ed1634f46c23751ef50e9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102848 Malicious code in following_hummingbird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613bdf8dd4831c9f4dd47476d71fbb307e57fbe083dffaa8ccb6bd57fdb53b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104835 Malicious code in klred-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2e966f935a4c128050bbf3fc2f823ec301a1823b185e6ac50b0a334b60dddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102027 Malicious code in electronic_boar-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5a127f729e00a29e97c781bc3c1600eb4f0f4047981d367cffbb8f924af5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108343 Malicious code in salty_sloth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdf2786216aa2e6b70e1503d508b4456b27325a9e9b12a04bf6eefb9dd8011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107166 Malicious code in potential_damselfly-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de4fbe6ba245d6ba9acae044eef9e9d60f1dbb8c47212b835aa2aac9d7fb4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110261 Malicious code in usual_lamprey-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587290f0d459313c33c017268c63ccb89fdb6c1edd4fda7decc1fc82d964a167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102043 Malicious code in elegant_whale-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be195d4d077ada0eea5f55e5f9f721eaf4eb15e0b99c2ca91fa5c6c58e2f788e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108849 Malicious code in slwrxu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40609334f486e3638a3819f834cf8e39b963bcf233891b30c8fb7e92febeb6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105080 Malicious code in lentengpasar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87f2833b5d6e21de288cf441d73e9c245bc5281ed7ffafe729a1989be87c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99067 Malicious code in acceptable_gazelle-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19558cb76a42c854e48f4f81f70a54a66222f64bd9e32e250b31314761373457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110079 Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...