MAL-2025-107167 Malicious code in potential_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a912d1d2923db2e434a34cb4419402c57f98340fd1f30028df92def1774614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108236 Malicious code in rude_frog-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70a0df5869ecb132726e108e8afdc7bb70ef8ec94e3839cfe9a72941239eed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102929 Malicious code in friendly_jellyfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ef4f8eb895e37cf2c351a588b82462a4a7c905ac597bac1fdf0406b169f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101411 Malicious code in devoted_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7da212f120b70944977bd3fa612c8853312ff259a296f1f22dfbcf04fae7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110804 Malicious code in welcome_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8c52ac1465aaf930b7996fba5b8ff8eecb88864ef39ad704f74fffec3f04b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104012 Malicious code in impossible_iguana-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55839d00fb26799deaeb18f5bd6384e4acae91e06263fc580dce2d9676b513c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_ermine-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4015f8fcaac1e34174592fc41d1efea8d6a274139d85c7632ad8a77766e7cdba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023581abc84dc091579f5219df24dfb5fb6362033da0fe9c90483df9ff41fbf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous_alligator-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9d9fc48228f6c569fc13f7a5ba9e4ed44ad07e8210ab7c04fc3ce6d69ec4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898799e6f1e7d3c0a6f909c7cf7fe21fb88af7c7fcb34cb22ab57f1cdda3e8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_armadillo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381bdb43956b46b4775a79e62c414fc663906cf40221da5cb983dbb1c997e1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_swordtail-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964b6dc7e6493439f54d0d3dce50a3dcbeeb198cfc78d4c8dd4e17b3072f7816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103919 Malicious code in ideal_clownfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3d8fb042dd9dd5a7e046108b7ea99ae7a8fbe8df0eeb8d06e5dd5735b18f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106553 Malicious code in oejlbn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6077405e80d76a0672f519136758025db315ee5126cf6b5475c447e91ea3262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108905 Malicious code in solar_rhinoceros-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95468a77b88367aaa3a56a1bdeed9b688851c4bea3ff29e5cda629942bf651d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99952 Malicious code in better_roundworm-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00436f4ae04b585a3251b45dce629a1ed8c9364d10c4fbc0f96bf371791ef1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110611 Malicious code in vocational_python-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07057ee54ab66530980519c51a15a6994823646725b6079f264be0535cd305cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108057 Malicious code in rich_sole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ad0832598cfd4dc9b18b8c1a1c04c24b6ea260152762432b0a3441a04601ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109239 Malicious code in substantial_hippopotamus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c804cf665902f56a14ae868c056f904a985075746a7351c834b432be0b2f075c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111030 Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...