MAL-2025-102413 Malicious code in extended_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6f114efdd2ae4b95bf801dd548da15713dc6aeff639ce312d883259b0576ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108898 Malicious code in soivop-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9866bf5d33db6690a3aa08e0ef9d11079ec390c8aa8d80885b036460bec827f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105628 Malicious code in married_weasel-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c629dd5fb11d3ae2f51a4a8f34d6de1110e0d5ebd032196a2002de85a54cff7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106776 Malicious code in ordinary_spoonbill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d582b3e43e7324b2cb6bbe9e44188e088c7cf627a8030410c147f684ea115af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99973 Malicious code in biliren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9a2ebbf41608c7579c0c8b07fa6c15953173aee217c31f5aa32f0770cf6c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101231 Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101007 Malicious code in corasn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4973ca98894bd3e6d3eb9835c65f4beb024bc893822d6db5fdfe013859637c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111007 Malicious code in worried_damselfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874221abd70e3fd86e14e8c577ef138411147b2efebfbb2705d540129f55abdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107397 Malicious code in provincial_rattlesnake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9934f39364dc2a0e601b19e7d67628ab9aa1834f26935916d6bdd92bbf380d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105595 Malicious code in manual_gull-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b762c251fbe710e2a20f5b7ffc78a3f9be6663db39868877c4691e4952b1c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99489 Malicious code in anxious_antlion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006f98c55a2facbfc1e7762026843f7513f3530e900c42eca15b18d8eb212bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110992 Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105868 Malicious code in minor_lamprey-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001811cb1364a5e00ef42ec1c7bf44c5555bdaf3f8475f3bb22bb3591949227c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102977 Malicious code in functional_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fb24c2fb17ee5ea26e4e8a2329a964e32ce9c30d2fbbc5feaf9ba40ac8b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100749 Malicious code in comparative_swordfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5ec6c5eb881745d7824d5d6fe6fb84abb442ad081288b58d45634db040cbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103980 Malicious code in immyth-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257c82648cc1ae4883958c9cfee33789553b8f673d7e1332ea6d09aaddc9ead8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yngsqu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0bd44447a77bb3f0c62f963b84efaeaa5a5d4ea3d0995622babbdcb4acb05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_albatross-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9159f0cbaeb6ab86ff0c13051d0e100105c8a4a8d9969a2384a8d982dd4ae221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_raccoon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18476022168083a82d48869bc3b1d9cb00483f80ca32655db0f3dfe3274239c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heavy_sole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103bc019391b006d516fa34593764dc2511b19425d75c7bf457d7318bc828fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...