MAL-2025-107319 Malicious code in profitable_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde26b132991696977fe5a2beb2f7dda02fb106e7fd08d4157047a4508c79a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105780 Malicious code in melon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fd49e9ab8796d92d6172e694d5041a4faf4a60f90470d0196993fe518a8787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109078 Malicious code in standard_raccoon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7c802fb7de5e6ed0bf4886759f2d01f53bd8c4842aac5dfd825ec088f842a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108642 Malicious code in short_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fd7db9c0ed81468d63983a59d48080c4c3ad9643baa2fc775cd3fb22ad8a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102847 Malicious code in following_hoverfly-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a55e6168c274b359d2fcfad7153391d0dd242f42c2675a1125cd73db16dfa67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103727 Malicious code in hissing_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50f39892e554e62795dd5e4776a7a97b1021dbd8906ade396a47c267b3afb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_cod-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b022e81d82b49c440d7f7bff80ef97cfe9e2f8d65af92302c4553323361b0817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_kiwi-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c1d7ebfd2a6454c020242e45fda0cb2d043fcd2c06ed2113c2fb99ccbe1da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99247 Malicious code in aggregate_tyrannosaurus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25d15c8aae798fd9403420f7594acb611c704425712fbc543f2e2bdee11f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100574 Malicious code in classic_firefly-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faad2bb4b9865717b149efd985e0e9497f9879b48ecded3533633169f65289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106718 Malicious code in old_reptile-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d48d8982a57ff9fc041d59f48a76df242529e76033dd09633aca55db6f891f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111041 Malicious code in wrong_cougar-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c4ffb8d4e012c4ef13198479bdc41f2469b66439e80b51cb6eb4f2aa81b494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101982 Malicious code in elaborate_lemur-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3e89f92a849f4437ecd5146355512f26b114e5c459cb11cdcedeea70c93218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107058 Malicious code in petite_mite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff5472e74c06f71d0dfa0965bd388c1e08f09635cb30eb2461225b274fae99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106787 Malicious code in organisational_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc30fc21d87914c05357700f3fd10dfbd66da22cee58035a249f5e53a8e439b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105374 Malicious code in ltd_guan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172fc147a36d4b0f7e94ae3341d6b9155a40b9e234d83c975e7b12a6ba692b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103108 Malicious code in geographical_dingo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f470cf421c877123d73c715e0ab3830c3dea923f4daf98dee6304582808360bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107882 Malicious code in remarkable_barracuda-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8c5c3c64d21a80bb3b2637dbf27522cd3929c7e65fac6427c9c167ba90a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102048 Malicious code in eligible_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4137d27a492127c60b130fb674bf307e99f8ca994bb49bf5521b422a5e33cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108572 Malicious code in severe_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6677a12b29e83e16c7ce5b50c57718724a527f88369c308233750d39503e2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...