MAL-2025-106038 Malicious code in mushy_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2fa24af69cd434a277b2034a7206f6bb0eccfebff149bb9cf8c628fdb7133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110044 Malicious code in unchanged_fly-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccc6c8d85df30e3e3055ac38ff48a6028b2dbaf2f9e250e9a33746f14674859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100788 Malicious code in complicated_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3099232508f436eee9049a17467d4d2116c6992e98e6ba8f1acd66cc6acc2c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106066 Malicious code in mvtuah-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c5da87a5df320dc634920e80d7803bdee52d1bc9fe7b2104067616d0b56f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99701 Malicious code in aware_donkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c27af153772bb84f749e05af5a75e25ccc5e3c8b296046a0a3c843394a16060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110236 Malicious code in urgent_jackal-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f08ca5d149f977be76ec178d42cd13af2f5e92a1a56596c15fe599edbf622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103601 Malicious code in hard_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f442df4706b8500ed0ee8fdf71771f3223d935a880be320b1c80c2471f0b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100645 Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106861 Malicious code in overall_lion-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c30ae87af4c7d1f58a48791d09a6fbbf66668125f625181544b3af35f520ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101860 Malicious code in easy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a8fb2b85b8fa2f90da1ea854702851cd86cac8cf7099b71313961ffbc07aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100257 Malicious code in capable_goose-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25eb945fb573fdf75dd740e62e3c15c6014b2d746ad9b06efabc57682537f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109605 Malicious code in thick_wildfowl-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5fa1d159373b8d1fb6b5447e4b2ea5d0ab0f6af1587f380e12f6b79ff6a0db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_ptarmigan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec363d2e27f438efa45944f7631619c0af02eb942adb7b6abf248759614f21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_possum-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87a85b0353ab566682e58ac8187dd341ad771d17b9b6b1f9f78ad43b56372e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_slug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3295d7d5ebeecd65b07aed15c436d96a450fe1f488d571360ca297fa6b63c858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_meadowlark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d93d8c6b407ee52bb1d8e65f61755b001e6f12febfa6da650383798d67f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce26dc1be53ed19e9eda525aa76b4217a1685002aa813a6450e22cdbbbb2d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_roadrunner-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6738508e306962636afff33da47a05ad115b14b6b65fc6dfded003896d6c30fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eaecyp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f139cc316254fa9330a1ec9d67f2059f3fed207a10031147ba7e287cdd7f093f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_tern-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8693d207bf907531bc36475729912369a7e90c9ad08b60850f5ed8534a37b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...