MAL-2025-105100 Malicious code in lexical_damselfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7915918ebb19b20a194bcd886674db1e4634f0c2cd21bac10929285249418da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107194 Malicious code in preferred_finch-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78162553b959eaa4b4cfa8eddb48888e723c1421ad3c545404d5a57076c19595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103104 Malicious code in genuine_termite-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04111f93e9fb7694d5da401cda547487a517b5211106aadf07822faf81484bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in knmfux-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffd7aff8a3f6eaed02ac0abbeb420d841ca8fbd40dc87c717588dd5d624c59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_dingo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f470cf421c877123d73c715e0ab3830c3dea923f4daf98dee6304582808360bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105197 Malicious code in linguistic_lungfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62da7dd60a7edb7ba90fe8453382d3a7e6ed68b647172e917e5f67298caddffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106298 Malicious code in nice_dragon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975fc8d15f2ec8df961152a333181ef311c04d834b2cd3f72f7f210a516dbaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104241 Malicious code in inquisitive_centipede-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5c09983b35c601a2ed6a886fa343a69b341f36b82175aa3736c819762967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109055 Malicious code in squealing_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1791680f88f943064d5f2e202640f60839fc901514632dce35eab3a828aa035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108563 Malicious code in serious_mollusk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68b3f52efb60b429cf70db60e3d470522e0254e2b6ab4885e09257f2483d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102245 Malicious code in established_baboon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553d9aa7e9d62bdcda31165100be9e64850a1e0693a4cb782c6f0e29b8a594c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111031 Malicious code in worthy_ermine-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda2183600b316a2aef9a11b64e534ebf0a5bcc0d4e70cd16065cb048c8f3be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99237 Malicious code in aggregate_buzzard-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1281d625f1f2d99676ce690521575685b95cfb92b70834f68906d6e34487d81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107726 Malicious code in rathorn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f0a1227e55451ab7e71658749fb57bf705bfa0459b6503e12ada45cb42dd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109442 Malicious code in systematic_walrus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f55e649997698bd7750f22363c9fa48c2c48017a370d8453dd20ccd9d610b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110797 Malicious code in weekly_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e0468678d00aa46120f87d768a4ccdc118d7a4e104d8add53a9b13f9299b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110357 Malicious code in various_porpoise-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e77f9e928223b44c5067f697d0481933b6f66c0a2ba1122f4063cca842c1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107014 Malicious code in peach-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a861896ba8fa47cd6a6ac74dca8e3821dcc397af38d898f8cceeb5cbcf6a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_carp-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4bfe7f4a0395943ec95e05fb2ef6b49e39ec6464127fde6009ef33fadc632a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...