MAL-2025-110211 Malicious code in upper_stoat-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32a5758dd468261153c526719cdee4341fceec8452c92de4a317dace41c89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100350 Malicious code in charming_pigeon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5b9bb57a5ddabbecf61fc020a3aa3b88510e251262cd4a7c32e80ba325ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107681 Malicious code in qxvfrp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8b788281cd05229ef9f1cf7875ad15609f4d0e03cdba4fb934cb9c11650890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104660 Malicious code in jolly_alligator-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a2ef94cbba2f4172716c09df6e09f954fcc8b0b870284b4cf3a6a261e07b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106378 Malicious code in northern_ferret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cdaa5321f08e988fb6d6869e1c1d73a9b54be5a3fe5154c7c5c4d7560ec382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102679 Malicious code in feminist_stork-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eba1cf246b221d69c6597e7e90afb5690b0f4722b51f55988a6392608c67db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105619 Malicious code in marked_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5494784f50da19c7e16f72222ec6439c0cbe437e19e781c5afd428920d44da43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100375 Malicious code in chemical_starfish-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2f608a1a6dc4098859953ee7de075f9dd6c522cfce91a1d6070f9a2a97617a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102744 Malicious code in fish-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46869cde55094b47a8fdbf63532a56f7467f68ad6fc3f2cc07210283b5a365e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110033 Malicious code in unaware_marsupial-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56ba771a6b655535e524d907d3c07c451351f19ce1c30aac97e41cbddd40132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106560 Malicious code in official_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a03759ef705ec014453a10ed44be215fe366ae87585e1a29f3afe2981f2942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109630 Malicious code in thorough_meerkat-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8744b76fdf3b282b1dd34ddaaf96526c970fd69c7f50034849f55456ca06df1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107411 Malicious code in psychological_stingray-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd440b485b6c5f3b9e7e824b2e13cb071dea5695784d81deb7a7ab91ef0405d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99749 Malicious code in bairalei-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4229ae4c697b82d08e0427676941931773e5e0eeadf9d2d5093286511210133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imefcf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897418c5ff6964964b9ad021a2d5482309ce3dfe545c42d8b81a5c7b8a2cc543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_dog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9d0fd7ef22d1aeb8f6e047a45164b39bf525ea1ed1634f46c23751ef50e9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_puma-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101781751aa072a0f3147a3579922dc8e7a74c0229b7bfa8b09dafbd5c1b6760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gvynmn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846d3e048ceb3faf49e129226900f1cc790adcb35e2e4437b787958335c62392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_marlin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc81d978018b3206a2240294e808f2e8bbb44b5d063e715d8b0a7d028b973be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controlled_amphibian-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb058e9d8c0b2c92940f78f3c06adc9e12b1eed607d92a3acdd75a2fb2266efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...