MAL-2025-104207 Malicious code in injured_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18543a19a841b67de235a99130912a70d4bbfa5007a68889f6f52ea5f38b7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103523 Malicious code in hamburger-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be2670992415031e76004125aa39c7e115e55b727782e5232de11ff9d4b9442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107144 Malicious code in popular_meadowlark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d94753387b06e961c8f03213d1e876caf1ff84f4f6a3e01b3f0ab9be671448c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105987 Malicious code in moythh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eab35c4e92110cffad64af92e26395559ccb57c6dd33cdfcfa81fe13a7f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108423 Malicious code in scattered_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd58352a5724f124f50e67f45354177206d87a89b69341d2358bec4502ff564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111519 Malicious code in zany_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782494d75dc504b09679355e12cca55a4c98a9375eb3f3ae7f362cd79ee1b217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107716 Malicious code in rare_mandrill-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8039af2e9b9aec798f34827d43e9d5d65533c7f459f19f9707324904c94c166a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_stoat-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32a5758dd468261153c526719cdee4341fceec8452c92de4a317dace41c89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_butterfly_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e51c673fcb1da2a57af1439094ed66c2e2bf2edda317fe911b8fc25e8008df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_wasp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6b6b02608d586b59914122617c5b59ca15392b624025f4ea3482f305c9a3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_wasp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cc95c9722d0910a8f4e161f7226487bb8f8c433559c79538c101c5da59d4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gpneff-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43b2ba47bf5b77eeb61d3e4a864be862822dd44a75c39b0f45668de31e4f00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_frog-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b403eba2b6d3981831b418f2ec035508fbd24a8f9a96c5be0bb597dd299a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved_lungfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ac4836b19aa400e1528e045cd3b06f48c837b83f1f22507cd4addd86e7c92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105635 Malicious code in marvellous_quelea-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c824126baf2d2952afbe28fa6da7b508f2649f1a0e508303e4cb1542702c501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111507 Malicious code in zalren-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610fcddf2ae7b37edc1ccb2979914e71bfd1074800b40d8cea35fafaf58c4f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107789 Malicious code in recent_parakeet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b278ba3e60d2309cdac5436dfee6dea619d6d94505a3299a6befa63ecb6a693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105939 Malicious code in modest_squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce7b26daac90a8e4a2666ecac25422aa4fafaa112fd9b66120bfcfb105aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111035 Malicious code in wrankas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debd5be03d6effc3914ff9797e225940fc4732a2b0061e1b75c70bdd24378b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106874 Malicious code in overwhelming_starfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5bc98e9741ecb54972ef5ce1dff009aa4dad1bc0b60acf56b07d48116b2924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...