MAL-2025-109817 Malicious code in tremendous_beaver-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e70e8600badd9a8a4d089a3c339d744552d55ca826eef7c9900ee0046979fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110044 Malicious code in unchanged_fly-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccc6c8d85df30e3e3055ac38ff48a6028b2dbaf2f9e250e9a33746f14674859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103381 Malicious code in grim_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dabafad5887d52174c586751d856ecaa4c519f340e048b8e17b46b143a07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100645 Malicious code in cold_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0d94aa1048e7c180590c81ca2c70d99c243ffa9e7bb64b553cbfd2916c8489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107682 Malicious code in qylkkc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebab4df0c96b832a8032cb5cd2738ee66f597aeab73158acf440c28f43b2ce9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110236 Malicious code in urgent_jackal-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f08ca5d149f977be76ec178d42cd13af2f5e92a1a56596c15fe599edbf622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100788 Malicious code in complicated_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3099232508f436eee9049a17467d4d2116c6992e98e6ba8f1acd66cc6acc2c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108518 Malicious code in selfish_chickadee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58183a2cb9088560c3fe07aac033e09e625153238390610b49b49b022a97eb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103601 Malicious code in hard_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f442df4706b8500ed0ee8fdf71771f3223d935a880be320b1c80c2471f0b4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106766 Malicious code in orange-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ed092dd425c705dfa0e464feef3c80fa49993210888739c3ad03704d6edc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109599 Malicious code in thick_capybara-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c39d29e9842b4ece8d44f8d313f52fa48b3da99952e82f13a59dfe1a9e299e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100776 Malicious code in complex_swallow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175f58655d3a973fc233503c176a1cf0488dac7993d63ebdc288c16e13df0390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108921 Malicious code in sophisticated_perch-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c314a52f4c870e9f9dc610a69ed717191eea0348032af7ab22f348952d8bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101860 Malicious code in easy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a8fb2b85b8fa2f90da1ea854702851cd86cac8cf7099b71313961ffbc07aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jambalaya-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326ba833eb3e1e6f65ce485cb2add6ba0f19920ae60ca0399cf92d00a1916dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101394 Malicious code in developing_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b51f09e37dbed9962220baffbd22d4ecf12bd78b3f1b890387468d1fceb3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100029 Malicious code in blushing_gazelle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac04e79b7bd0692cfa4289d4bcea1dd1aead67021ee8d8ef57acc9b0aad73bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105876 Malicious code in mirabalar-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1291cedd60554c08605e9bca0e88de6e1c6221d8082f477a65dc15f4ef4dedd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_swordfish-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8321a931f1e1507c610b936feb05c83a38bc04bd45e6ab9ddd4eb8262ece7408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_skunk-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc308a95bd49bee455a5f3977b927234eeb7c6e85465a1c8590ce246b83e6047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...