MAL-2025-111714 Malicious code in characteristic_flyingfish_scarlet-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6e1a52db0a5be38bce84c4e5f49865ecdb7ebf1d9131e0b36ba18f77f1a360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112283 Malicious code in selective_pike_fuchsia-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddaa89e00a2509fa1bfc0ab0e696c826875b3f644cc35473499cf0d9cc12914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nosy_wren-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb558685b2cc3416713bd35f55cf7880e70d46a8ce14851c721ee43b048bea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_orangutan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f375f63464f5f0397e536f0cb4c9c297bb3b182ed84f644406e11565f963c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101824 Malicious code in dvehxm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e64a8b409fe4fef1c761c30b71cf8a5fd02d703162eced98525ee2a7259e287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102671 Malicious code in female_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa57bca03df7e8131ad2d8cee3601936e49e4b84812b9ebcd834fa39328e38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101238 Malicious code in dear_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd296cb8cb41d0994f4b1672649e774f450dd1b5f20f7d09468dd647ea8339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99645 Malicious code in associated_seahorse-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b87b66de8aee9c3a47cd37f9f7693d15c107731f052f6f74dbafe33c8001b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107248 Malicious code in previous_quokka-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293bc888c42ce59c4c84449f6e5d9113cb62d1b8ad60d7d61f9bc47d85811235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101671 Malicious code in disturbing_walrus-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3278efdb6f851ed9d0f0c0b9d7c5841825eb4906604426a5ffc02e7e4eba8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99875 Malicious code in beautiful_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf72fb7258f3ca98202f0a6a04b0647a4fe6457a8a036cde296324c0b5be616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108392 Malicious code in sashimi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eeaa658101fb112d7e8b6f00a2925c53d263acd4036b48a6b3add95ea25aee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101369 Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103941 Malicious code in ideological_wolverine-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc89ba643b6b4fb07b1850444c24464dce27b6dcc46650da6132e8b7172f89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107011 Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108820 Malicious code in slim_koi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe48ceff7e562f9ab2e9811fab542d2fb9a4354253ab9c7f73efb491a5baa10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108463 Malicious code in seblakkuah26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbab68f5f804c0ea7ac1ab794e0ba2ef5215cb52fb4237c43a27126c0b801ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100092 Malicious code in breezy_dolphin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb25201ff2dc9af62d8680b45b5ff94ea3f2b281b93ea5cf357376d4a289f511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101896 Malicious code in efficient_meadowlark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab1001069f7639cd4d571cee32155af92fd9170d600ab49178bec1645154b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...