MAL-2025-108825 Malicious code in slimy_crab-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e311dc02414cbc463638ac9368bb7d8e5d285e2b8b9babcd0d847c43461b001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103104 Malicious code in genuine_termite-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04111f93e9fb7694d5da401cda547487a517b5211106aadf07822faf81484bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102883 Malicious code in fortunate_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a00cbdd56fc299288391dab85204778fa16f82588c4927ca272745a3ff5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99237 Malicious code in aggregate_buzzard-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1281d625f1f2d99676ce690521575685b95cfb92b70834f68906d6e34487d81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106298 Malicious code in nice_dragon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975fc8d15f2ec8df961152a333181ef311c04d834b2cd3f72f7f210a516dbaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107886 Malicious code in remarkable_condor-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a6b48a0527880aa04c7ab8960c38e0c9c16c57c49ed7b4a5c42a025fb7ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111031 Malicious code in worthy_ermine-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda2183600b316a2aef9a11b64e534ebf0a5bcc0d4e70cd16065cb048c8f3be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99360 Malicious code in allied_tarsier-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d864a9937c02a3f4beeb778c2fd5d0590f909ce38f6d6f913b0af12741786c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107726 Malicious code in rathorn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f0a1227e55451ab7e71658749fb57bf705bfa0459b6503e12ada45cb42dd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107014 Malicious code in peach-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a861896ba8fa47cd6a6ac74dca8e3821dcc397af38d898f8cceeb5cbcf6a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110797 Malicious code in weekly_warbler-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e0468678d00aa46120f87d768a4ccdc118d7a4e104d8add53a9b13f9299b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108563 Malicious code in serious_mollusk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68b3f52efb60b429cf70db60e3d470522e0254e2b6ab4885e09257f2483d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109442 Malicious code in systematic_walrus-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f55e649997698bd7750f22363c9fa48c2c48017a370d8453dd20ccd9d610b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful_spoonbill-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f077a1677e9eb34062d00612d6de840de84e135d6bfb226a32a65bb8e6e30e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_bobolink-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a444b83cb8a5f9b75500c55bda5633dcd8c01f9912b3aa946f2f28aa20b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous_partridge-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795483c51da52200729b5b56c53c6553c78a396b566b89379bea633267be15e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d2d48662178a018131a31cefc46b0e546e1271faa07ebcb8702cfbeb92bc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded_wren-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74047a419f902f44288570d3c0de95f63d92a6dc181e0b5dc9ed566ced8555fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_bison-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dmzuvr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5921c01514081851faffe515c921293626fee494d4aaf2feafb50f06857bab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...