MAL-2025-100968 Malicious code in conventional_parrotfish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dde6f33b52a73b4020f6f64d9154256b774219ef7897f9b165d22f0270a341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105644 Malicious code in marxist_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5d59b36476c4cb83aa6f6f8084735e280ce8d6e477480c82e986debb478001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111523 Malicious code in zealous_ant-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c7ac2a9f183e73298cffb0808a4893e1d97dd4a4ac777cf6fb9de9591c45d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105849 Malicious code in miniature_fowl-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f75a58602e5dcecc19ade4a85caf254709939601a227014bd4c034317f8727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110146 Malicious code in universal_raccoon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a058d777582b13b881ba94c5b5d65b0b1e890875b810c8066be3209db03e1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107670 Malicious code in quintessential_ptarmigan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76930c06f021a1567bc966527d595b9a10950688697c345c5c6b75801e1233c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103101 Malicious code in genuine_llama-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeccb3a3a049dd91e5b548558535ebab1dc2dd29793b4bc3c24e8367fee6a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110093 Malicious code in unexpected_leopon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554ccdbdaab79df007f1c8850bbc09c67dcde91387fc16776b9225cf84c32ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109352 Malicious code in surprising_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50324156f9f41cfc9d3bcdafb958a38384d938e7a38449bb814784b0f682498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109906 Malicious code in tzgxrf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dbb4c7839dccf1f5b3c2140857e7a5b4736ac902080a486db7763c7cd9b947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103325 Malicious code in graceful_macaw-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03abe60d7ae999cfd3cf9d3b8b7f4d95a463c0704e4fe4530f3f12270e9afe17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101066 Malicious code in creepy_clam-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9946ddcf1daf99d7f76b9f9475c66d11959093ffdedf7e6b0af226d07bc6f689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103067 Malicious code in gay_junglefowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614fbe321a27656205c22dee47d6449378e6a4d8441dcd3cebd46e3123c923cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107368 Malicious code in prospective_marmot-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed14a331d070eb23c755936f1906c54c7073a47f8aed9603c75cff9b3bab2f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101143 Malicious code in cultural_skink-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a336ccb3387bf0a93b67abc396cbfbbbae7b33c202d2b0e3db9a7298afe35438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100875 Malicious code in considerable_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2ec8449b597012108e05e1a0ea324200402ba0b6a4e9c78a67fc8285e3883d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105312 Malicious code in lonely_mastodon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb36596f351aa7ca48a731a32ee2b5c58525294b7ba556710449f3b198ee118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108580 Malicious code in sexual_koi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8fbc9bb3dcdd2bff246e5822c40e879684b771a107b3dc5e1c4b769c06fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105203 Malicious code in liquid_orca_gold-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04734a0026a409ad2e22abb6973b46e101bfc70e8b0da1089b8f0bb9adf8c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109583 Malicious code in then_ocelot_lavender-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44619ab182b16e7434fd13b44abbe52d1ac90a05bb65ce02390061e52580646d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...