MAL-2025-110797 Malicious code in weekly_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e0468678d00aa46120f87d768a4ccdc118d7a4e104d8add53a9b13f9299b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109442 Malicious code in systematic_walrus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f55e649997698bd7750f22363c9fa48c2c48017a370d8453dd20ccd9d610b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110357 Malicious code in various_porpoise-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e77f9e928223b44c5067f697d0481933b6f66c0a2ba1122f4063cca842c1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108825 Malicious code in slimy_crab-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e311dc02414cbc463638ac9368bb7d8e5d285e2b8b9babcd0d847c43461b001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101160 Malicious code in curly_muskox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710c34efebd7b09082a21134751cddded7794cabd60725d1a8ebdf80f57d2043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106069 Malicious code in myrkkj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22591ec59e64b1809c4da6cbc5068fd8d4f078c4d2b69450617aa20194d9ad0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110777 Malicious code in weary_lizard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc03fa742f8a9d9bce88dfb9164daea6e02bf087260d6538f11ac3d7037a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104367 Malicious code in intimate_wombat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eaaa101478c1578dbc16bd1bee57e37d30f20803b427862730a280c1d21672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105269 Malicious code in live_beaver-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66354d4ebfae4f0e642cf29bc8b8d8132d40a15a00631240a3cc64f45d293062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100047 Malicious code in bored_bird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6545fe9ba2a5e4fe4b42d1339a3cfb21e748d25d398f8b9aedf57dee3bdc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100295 Malicious code in cautious_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caec341bdc23893d0145fd171576e280dd83b6bfc5c9743b5e9d90f30f69eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44de730e1496fcbcb96b69c8eda3540e52476fc8a0aef993f419f6e5ed42c3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mvtuah-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c5da87a5df320dc634920e80d7803bdee52d1bc9fe7b2104067616d0b56f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108563 Malicious code in serious_mollusk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68b3f52efb60b429cf70db60e3d470522e0254e2b6ab4885e09257f2483d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102245 Malicious code in established_baboon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553d9aa7e9d62bdcda31165100be9e64850a1e0693a4cb782c6f0e29b8a594c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99237 Malicious code in aggregate_buzzard-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1281d625f1f2d99676ce690521575685b95cfb92b70834f68906d6e34487d81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111031 Malicious code in worthy_ermine-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda2183600b316a2aef9a11b64e534ebf0a5bcc0d4e70cd16065cb048c8f3be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104241 Malicious code in inquisitive_centipede-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5c09983b35c601a2ed6a886fa343a69b341f36b82175aa3736c819762967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106298 Malicious code in nice_dragon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975fc8d15f2ec8df961152a333181ef311c04d834b2cd3f72f7f210a516dbaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...