MAL-2025-107422 Malicious code in puny_dingo-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844aada10c932a00dcebaeb59e0e50d48cd0d27ac1beb1bf3ac6f7b6644d7e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102573 Malicious code in fascinating_rooster-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc801da4e0169249bf81a0b7779de515c671bf89590ff4f1c527b8e657e51048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100142 Malicious code in btwrxd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b35697f22d7029058ab4422aeec9e5280e8e6a1eb8a7308fcea669d15b736e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105050 Malicious code in legal_catfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffeb137abd62d7e3e6e88e9a33237e75852a979486afa7e0a2404217342b30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103263 Malicious code in glad_sparrow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af3c7cb6fe510034762662a82e74a6593fd27ba892c374eb5f8a35b6ddd4aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107266 Malicious code in prime_lizard-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f306fcda6c370ad8829d15e19a1a01973d259319fa0328bffe695b5918033519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101612 Malicious code in disappointed_frog-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b403eba2b6d3981831b418f2ec035508fbd24a8f9a96c5be0bb597dd299a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7664c02e1828ee4496983ebd302faeb116ed4abe7092cd33e0b350e7df7f6da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_meerkat-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9852778c13cf42f61d14a04176efea0591c9c1b4afa806f79ac6b31600fbf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_narwhal-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e95a400a723d7e084727fbb90ffa83bb7e38867bb650af581c53c9f5907c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_octopus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fa36d23003d827413eecd4bc8e7ed02ad514d89c8526bd96e447eb5e38a399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in euvogg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20386d122fa657c80550a8cb02a3a3b7bbe870fb9458a97d6b508039c80d50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pure_louse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14368e86d85683f40604acbbb389b04cfba45f9e09f043f8f683c6d77b5a67da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_grasshopper-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88718f14e5ab2c2a45cd4f801d8d7b0ebb7c7b9795270329f4d661bafe31010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bawiwn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dada283d2a00c3b0d45cfa2bd4e2401c213c52e5f45fb8474ce2d8513acc0c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103325 Malicious code in graceful_macaw-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03abe60d7ae999cfd3cf9d3b8b7f4d95a463c0704e4fe4530f3f12270e9afe17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107368 Malicious code in prospective_marmot-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed14a331d070eb23c755936f1906c54c7073a47f8aed9603c75cff9b3bab2f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105312 Malicious code in lonely_mastodon-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb36596f351aa7ca48a731a32ee2b5c58525294b7ba556710449f3b198ee118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103067 Malicious code in gay_junglefowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614fbe321a27656205c22dee47d6449378e6a4d8441dcd3cebd46e3123c923cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105644 Malicious code in marxist_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5d59b36476c4cb83aa6f6f8084735e280ce8d6e477480c82e986debb478001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...