MAL-2025-107119 Malicious code in poised_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7dc115fd587505f587715c0b1a9a92dfa955881e0bcfbc3f9067c749b17e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104259 Malicious code in institutional_meadowlark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a373d82eacc134da5c942fa9a3cb181f1bcb7e2b6a659a851e0bbc39a2dd113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101769 Malicious code in dreadful_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc06de52eab19eb02475a8cc373b90c98eb17b492c489678594fce97052c65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101668 Malicious code in disturbing_hookworm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a578452b9fc9a222763002529f30db75a83f89644a85476ce339b8ab7e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105940 Malicious code in modest_toad-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e77864798b0be7cbdb663c89c11eacd5195fd481a2a364ba57dcc9928d994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110340 Malicious code in variable_manatee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376985a9b75e8f9d90499f13a239df23e616b57fb0eda43812e83fb114a8fbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107242 Malicious code in pretty_swan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43c9bd88202ba76736996e859344c97560a9e71ba2e858b704a3d071ff62367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101886 Malicious code in eerie_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4326c51590a3fd5bfccd2ee50415375553323bc4c339ab0080a82770dc8b0869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106724 Malicious code in omqhhp-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21fbc85dd0e3f36ec53e054dc38540362fd804281a98708019fdb9771962ecf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99029 Malicious code in able_crocodile-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faece281da5dbd4c3da568c69a21b3f199b14138efd345dc0269c0f6fec43e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105596 Malicious code in manual_planarian-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0b63f8b334f1953e593246dc546f33d39b20f248791ca65f865a46610ae993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103784 Malicious code in honest_swordfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24440c84c3a3231183885bd638a1a4e4c4c3d9ab64d994b4c56476f092118362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101113 Malicious code in crude_newt-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a07dfef88a121566ceab5fe7aba935208b616b30dbbb4bedb50c822f6af717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108457 Malicious code in seblakkuah20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b85d4adfa4bec9ceae7a72a3a6f512d035dbe6723e147b142d142b6f2f864d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110429 Malicious code in verbal_hornet-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0c60640d90e3101801328f58452e1b439fbfaeb15e292f1e320b2a5aa024d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106374 Malicious code in normal_prawn-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c8271617c3ef1526465d99622e83b89f471eefe8c8c6bec705d951aff41dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde69c5d2e56d3f5873f47980800a3e98f264bbc40ed8680b3905b54ff443854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_catfish_chocolate-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd732b49a0427bfc58e053c4a6522ab6c865e4163a9e6ca33e705d3096121c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_stork_jade-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e6d24c01db2a616f62aa45a9b317af68ebdea7029e7c486dcfccc8e75a502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...