MAL-2025-110340 Malicious code in variable_manatee-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376985a9b75e8f9d90499f13a239df23e616b57fb0eda43812e83fb114a8fbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde69c5d2e56d3f5873f47980800a3e98f264bbc40ed8680b3905b54ff443854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf4bf65a7609df7de6ee186b478fe7c1ac2291fc92c3b889b6ccf78597f1d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_boar-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6402d025c9314a86b03889c16d635889a04910cc0c05ed826ec2811ab8fa8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda94cc8717a6a5b9007520e0328f2d2ca52603afc16b1a0c587ad91fceb2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106374 Malicious code in normal_prawn-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c8271617c3ef1526465d99622e83b89f471eefe8c8c6bec705d951aff41dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105940 Malicious code in modest_toad-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e77864798b0be7cbdb663c89c11eacd5195fd481a2a364ba57dcc9928d994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101668 Malicious code in disturbing_hookworm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a578452b9fc9a222763002529f30db75a83f89644a85476ce339b8ab7e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101769 Malicious code in dreadful_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc06de52eab19eb02475a8cc373b90c98eb17b492c489678594fce97052c65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105596 Malicious code in manual_planarian-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0b63f8b334f1953e593246dc546f33d39b20f248791ca65f865a46610ae993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107119 Malicious code in poised_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7dc115fd587505f587715c0b1a9a92dfa955881e0bcfbc3f9067c749b17e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100370 Malicious code in chemical_butterfly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1fb0f60bbf5f5f1902d1ce081db8f2a9c6c7b0ede5ce84431d0f347758b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101113 Malicious code in crude_newt-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a07dfef88a121566ceab5fe7aba935208b616b30dbbb4bedb50c822f6af717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110429 Malicious code in verbal_hornet-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0c60640d90e3101801328f58452e1b439fbfaeb15e292f1e320b2a5aa024d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99029 Malicious code in able_crocodile-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faece281da5dbd4c3da568c69a21b3f199b14138efd345dc0269c0f6fec43e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_fly-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0567de772e6a805d5be0668250f3825e4d7b8d487e23bd638ed68b13494c5ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_catfish_chocolate-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd732b49a0427bfc58e053c4a6522ab6c865e4163a9e6ca33e705d3096121c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_stork_jade-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e6d24c01db2a616f62aa45a9b317af68ebdea7029e7c486dcfccc8e75a502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...