MAL-2025-101250 Malicious code in decisive_meadowlark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d93d8c6b407ee52bb1d8e65f61755b001e6f12febfa6da650383798d67f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101855 Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101781 Malicious code in drunk_hippopotamus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f99c5a61a7f5017d15e5a03ad75a161a4e82acdedfd79a0d8ac2f8e605ec4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107437 Malicious code in purring_mandrill-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1843e02b4a3de92299d99217f921a065938bd17d84087032964d08674a2cc286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103104 Malicious code in genuine_termite-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04111f93e9fb7694d5da401cda547487a517b5211106aadf07822faf81484bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105197 Malicious code in linguistic_lungfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62da7dd60a7edb7ba90fe8453382d3a7e6ed68b647172e917e5f67298caddffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102883 Malicious code in fortunate_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a00cbdd56fc299288391dab85204778fa16f82588c4927ca272745a3ff5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111031 Malicious code in worthy_ermine-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda2183600b316a2aef9a11b64e534ebf0a5bcc0d4e70cd16065cb048c8f3be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100050 Malicious code in bored_jay-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c36149cdf17d5903dd3152e3fb5de7b075ed9b28f8fc338e7a00cf77c65edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100295 Malicious code in cautious_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caec341bdc23893d0145fd171576e280dd83b6bfc5c9743b5e9d90f30f69eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109055 Malicious code in squealing_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1791680f88f943064d5f2e202640f60839fc901514632dce35eab3a828aa035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107404 Malicious code in psychiatric_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b49fa6893ec55dce7cd936d224cf65d5c01df3870bb5563ef068c5a6dc6b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102026 Malicious code in electrical_haddock-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84223d34bd695e5cadebff44dff68d145356df1eb4e36ed0ecf9b714d1a51aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103062 Malicious code in gastric_flamingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e6d498c236681a6c2af7f48940fd8ad2f7611b6fc2ad8ac2a5c2f36fc8a87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105677 Malicious code in maximum_roadrunner-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b061baac98079f49d88d37e36e474382503acdda97bcdd425eab994134ad42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107194 Malicious code in preferred_finch-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78162553b959eaa4b4cfa8eddb48888e723c1421ad3c545404d5a57076c19595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109015 Malicious code in spiritual_bug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f1198751f14e9c5684508db09a9aef3965e3c203af6aafd1e89cf520707c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108392 Malicious code in sashimi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eeaa658101fb112d7e8b6f00a2925c53d263acd4036b48a6b3add95ea25aee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104277 Malicious code in integral_leech-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afef20abd0daae99c81130d04bb3ea23b68d0f186b2c34831571b3db3d9467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...