MAL-2025-108236 Malicious code in rude_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70a0df5869ecb132726e108e8afdc7bb70ef8ec94e3839cfe9a72941239eed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105654 Malicious code in massive_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a4f7a5f92270fa90ace9ba61c005a24751854fb47bfaa0ec12bad9d79bda99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102929 Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111030 Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107995 Malicious code in retired_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0b11d322b37dc32cce4189501b1e39b2c1308bcf1eced48a61276b39096c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109239 Malicious code in substantial_hippopotamus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c804cf665902f56a14ae868c056f904a985075746a7351c834b432be0b2f075c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107331 Malicious code in progressive_pinniped-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3d851c3d27a3e1b275591e8a4c0605f1d68fdbdd8a16a039c312efdadecaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100041 Malicious code in bold_harrier-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e37b1e2d0771c87d60506b0d082a061689521bc18f825a677d31316a639cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102726 Malicious code in fine_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1633e53e54ef232bcb09c1b2a595f6865162cdaa19aec3cbd4879887c75379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106876 Malicious code in oytrii-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcec6841765ccd57f7bc0622e2e39bdb36b656a4aeaae6e7e434c80d5b5ee93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102143 Malicious code in envious_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a879aa1065a4a8b4a9fa31e261c67dde9d73680d49d4b0a9c63b2e87e59085c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106553 Malicious code in oejlbn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6077405e80d76a0672f519136758025db315ee5126cf6b5475c447e91ea3262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107167 Malicious code in potential_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a912d1d2923db2e434a34cb4419402c57f98340fd1f30028df92def1774614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110804 Malicious code in welcome_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8c52ac1465aaf930b7996fba5b8ff8eecb88864ef39ad704f74fffec3f04b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108905 Malicious code in solar_rhinoceros-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95468a77b88367aaa3a56a1bdeed9b688851c4bea3ff29e5cda629942bf651d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110611 Malicious code in vocational_python-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07057ee54ab66530980519c51a15a6994823646725b6079f264be0535cd305cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104012 Malicious code in impossible_iguana-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55839d00fb26799deaeb18f5bd6384e4acae91e06263fc580dce2d9676b513c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101411 Malicious code in devoted_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7da212f120b70944977bd3fa612c8853312ff259a296f1f22dfbcf04fae7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103122 Malicious code in giddol-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7f18ed80c8cbdf75006001c9aa1c871b49bd8db86af3d5f6bbfd0cfdb5b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...