MAL-2025-107149 Malicious code in positive_dove-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa1a7f84d1fbbd4f8ad86fc46028564d001229f3ce8b277a588c5d5a4482818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108329 Malicious code in safe_clam-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0378d9ffb3c3e5a740c893c6809f4eee5e89acb651484ebb0669f5ba07d4c1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100027 Malicious code in blushing_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ab031370da8697f351ce9a6dded95bb0864f4cf1d2816f6d6dc09959d8148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103840 Malicious code in human_whale-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260a3c47fb71c70575ab5c80626779897df3375e8b7e09e426735d3ebce73579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103259 Malicious code in glad_giraffe-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb208816c694b0f8fcc5d06a83eb98d967f6580e9382609a440955432cac0bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101813 Malicious code in dumpling-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129724a03b50588d7bd32087db5a992d8b687f866a0765ba31e28f5929308e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106932 Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101120 Malicious code in cruel_dormouse-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44591ddb82bf3e5dac00255f0af686ea98aa46ffeb42c9e9a4b770ddaca6d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104277 Malicious code in integral_leech-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afef20abd0daae99c81130d04bb3ea23b68d0f186b2c34831571b3db3d9467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aqflkx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd9ff8d487b1199965871968bb72dd64ee15702ef5df3f354126fa578b37a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_planarian_blush-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2348c23d45b64888037dd0e601646fd14cfe7113e05daa487f52af864cf9c0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_jay_crimson-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15664ce21b62cc46be3aac8a1e311d7f2b3d6a1c7f8dd95794ade951f9bc3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_pinniped_gold-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a2d47d9916e1a7873bdc152d0af4529da664ea39e75190e1a7637c146a88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_locust_maroon-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb8d45eac5f0a48e828a3965756d24280670446eeea6ccb5a31216f3ac2832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107130 Malicious code in political_catshark_black-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0cc64c2fb374f41f266e299e1de998f0f2a3594fe123b002e977e39906769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102807 Malicious code in fixed_louse_blue-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c031450ce82cbb47514fd3604ddecc59f90a389f473468561be4f53c8463ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant_tick_maroon-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfbde61c0f391614f890ec70eab96728dbc19f353b14b2413d353e8caefb551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_swallow_coral-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a353dc966f49b0cbe27110f418102611e30e19252f2db7850338dfde06459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_fowl_white-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a94d2cd8b8db3a66b55adea3f167abc0df75e1967a574bc3b0b40c05cb8a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99055 Malicious code in abundant_tick_maroon-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfbde61c0f391614f890ec70eab96728dbc19f353b14b2413d353e8caefb551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...