MAL-2025-107907 Malicious code in renewed_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde69c5d2e56d3f5873f47980800a3e98f264bbc40ed8680b3905b54ff443854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101860 Malicious code in easy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a8fb2b85b8fa2f90da1ea854702851cd86cac8cf7099b71313961ffbc07aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104439 Malicious code in itchy_impala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad334becc234d2661d0a676d8a4a9379f00608bde010dbfd2b501151c4491f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105131 Malicious code in like_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7611c3525d7d2e5850fb112f18206719901fcd59bb0b9589265a5029625ff6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101614 Malicious code in disappointed_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb68ad302a3c0d8077b28596e03e7c25af88afa027e63ff036d25d5b71d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111301 Malicious code in yielding_roadrunner-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd7018b46bdb796bca285526d3a8612642e364ba0dbc6faaefef3bcb2313860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_lynx-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5926396abf3b687144e257c92170080e8003c83aaaece2f4ba9169000e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_swordfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf3fb97d32d945c6491b7681dcde1895ab293af81f1d5307b4aa1ca3f2883cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf40fa4f0a0d967826c163ebc922c59ffcf2d424ddba67217833ea895394431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_cattle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc1e74bcae8b6737b74fe10fd12eb1eb39d8015ee94e79a242ad57bd2be4e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111331 Malicious code in youngest_moth-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afa69793a4fbc5f64685d25d91fc8e66be3298a9bc6a40a0aa87fc34ea68ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109018 Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100872 Malicious code in considerable_ape-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58952cf78fc5102e58ce44501155c7b26ba92c490c2eb1bbd6b4f3a98d41337d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_scallop-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1690c74103c8e8ecc73348ee3523365d1ed3cc930d2dcd4d217351ea23e905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108153 Malicious code in ripe_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d38c12ab0650a5c44aa1807956ab2f2dc0bbb79291b315a229411c3168a8a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105797 Malicious code in mental_ostrich-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c2b6cf154fe9cc53c0a91727cc2fcb2bc3a260de92672b60578cd80eb1112b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81990ffe7223c1ccc9081f1adea01c913524fa162df5b63773c31c952e6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105987 Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...