MAL-2025-110898 Malicious code in wicked_spoonbill-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157181757efabd0daa2b121931e22cd2b7c93879ee0f374ba720ac6c714c2fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108708 Malicious code in single_guineafowl-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b238112a9a6573c20263e88e9a835c4bc64b0675f36378b9c96d0805e8b306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105366 Malicious code in lqnzwf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5f48bf81693ef6960d7953f2d67b141d997a92a4bfb74e02db9a96439d481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99234 Malicious code in afraid_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8fd245871f48b791d437484176aef148f2fa9fc12b7fb1bfbc71bf89223e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105291 Malicious code in lmxqih-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bf63a6542938424c535cf424be087b8094c8c9f9dc92a98785a7b625a6e03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99979 Malicious code in binding_magpie-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150239c9a4ba0ef1b63d86046f1951c8e5193cdb95d705ba00db8679ac0e2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101369 Malicious code in detailed_giraffe-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662ea74f8ebf827fb9e8c8203f1f12475f4baf9e1568a4c5baf225ec8c3dfea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104258 Malicious code in institutional_locust-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4476cbd934a8b4e263defa08d6126a3057ecd2475849d20fd8328a91c74b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108820 Malicious code in slim_koi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe48ceff7e562f9ab2e9811fab542d2fb9a4354253ab9c7f73efb491a5baa10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99981 Malicious code in biological_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3fd77fd428a90840bd745f4bc6cc03fc0143c3264ae51cb3abcc75b4eb89cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99645 Malicious code in associated_seahorse-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b87b66de8aee9c3a47cd37f9f7693d15c107731f052f6f74dbafe33c8001b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_guppy_cyan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29ce14a040014c47013e4e0aa168d375eea1e8bfb57d2e150313b6c8716006c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_lobster_ivory-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b70bbfbbff612f72583f30fa37f8f2f81976845a2dc82e812c231feae18e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_constrictor_scarlet-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c831cd98c7940951c3a4d29948007bcf805932b690da02565a625dacbd1ec673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_bison_cyan-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc33a86662bcabadcab7c50e1ebf4ce0cc9f94147d4c92a331d3282a26d765e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_crane_orange-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891beb3953c8b2256a7d40a8a930d531ce03679c150fe13977c69b9def9d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105881 Malicious code in misleading_bobcat_gold-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b51858fc9b4092af02f1f2d410a1861bb1aa394637561b6d72a0f4694e1886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6295ffd3a326e114af8bd5a826aa6d7f930ea18eda7199e0fb84d3cc544b7044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade11ddb015a4032bcc0514cce42006313205f5fe0595536be508895d90285b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...