MAL-2025-99070 Malicious code in acceptable_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354e912b1e2c737eb0df3877f5d60c3417a970138b04215d2a24ca99b78a504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106249 Malicious code in negative_stingray-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbee2fb813aa8ba8890b9c5061bd6dacea051eede9e2e705631235ef1fe5a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101047 Malicious code in cranberry-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d304027659209740433caf4910ee8ca8992e7b482f001e49c6e9496907d7309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100297 Malicious code in cbnkaj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28a4aa7909edc8959167b9c92ba2e16a1c411d9e289a2be98d31e95f012616f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100807 Malicious code in conceptual_mule-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689aa798a760c5d6094b00194513b75aa52623b4138900ab660531b6bff0c0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107198 Malicious code in pregnant_boar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb9f3a419171d5bcc2d57107751b6295ed2bdbb486d9bd1f1d610922de9ae87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108066 Malicious code in ridiculous_gazelle-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0741fba236a4032664d6262c17d8a780ee1efd4f5f1092707748091c46c908de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hgkzrc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba9eda2010c04c284344686ba016c49e8473b45e8d2d98952683c95a7b2b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_mandrill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e77e39ce3d8c1463157fa35e54a60270f7279efd4bec08c740485f2ef11df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101365 Malicious code in desperate_crocodile-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5f2fcd1f283059f1b0a6184b0e84ec8131bc65b209167f342fec1c6f451972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104276 Malicious code in integral_kiwi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5268bc6029666e2df628e0a7d48b7ef01d9e92715e64d27e29fb310b3e0acdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99688 Malicious code in avocado-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e396a988985df485f505fded6802081038b17755ee3d8ee3f90d5abd251450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101235 Malicious code in deafening_scorpion-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad0d82095b16c423fcb7763cfab6b9e453cae5eb93b93a2b718eb926de1641c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106404 Malicious code in nuclear_parakeet-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d955ee922da155c0a31d2503d116e684a9acae05ef5fb979b596f860c3a2102d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102737 Malicious code in firm_cheetah-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0c061b3177757ec9bd7b0f50a90724761c02c59a457570ebfa8e23e41d1cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109303 Malicious code in super_sheep-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3e27d3196d292d770b7363cf7a7464bcce7f67f80ec3a1604b34a4e9c08bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100001 Malicious code in blank_tern-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4df4c58f7dd068e3b31f86cdd892beb68ca48cd84bef7abda868bf9a41321f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102555 Malicious code in famous_angelfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7727742c8575f29d6aad87bbdae0ee6e0992c71d3e1f12d865a5e08a3f73aa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...