MAL-2025-101135 Malicious code in cucumber-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9469ff490246fcdaa28a7eb4f8897e226d47ff6afac1230a30c84c6d56fbf4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105867 Malicious code in minor_hummingbird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6abdb36e13460e5d225ffcd294498b503ca2f2955edb477459bb5f2f7d1da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100128 Malicious code in broccoli-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54c82c60758d101880d2e742e238fc1147d2cfe8dd5474220a26d91e4462213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106552 Malicious code in oeaaws-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd18844600be94e8ccc6c8f75726c5bb142595b1b5ab90c3250b00985b6db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782494d75dc504b09679355e12cca55a4c98a9375eb3f3ae7f362cd79ee1b217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remaining_dragon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bd0bc15941556638c5cfcaabfc7572165c49042eabe1eab034a349c7ce0089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf40fa4f0a0d967826c163ebc922c59ffcf2d424ddba67217833ea895394431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103384 Malicious code in grim_hare-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2216a6bd3c3cb02157b3ea350350d0123258cf1ce32f62a1d23e17066069dfac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109065 Malicious code in stale_harrier-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e078492a9589a52fe5b3dc6c0665d30d9a24ec7ff54e6869e4041f42732581f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99490 Malicious code in anxious_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c41006a04f54d2aff98bc7644d16991a7bf1fd97af9148a7fd91d99b94ba39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105589 Malicious code in managerial_marmot-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1697a5005ecca9763a1652ca4e588f3d31ab296a522fdba13f6ff9030ed4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psxtzy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8caae3553581408b70a895373aafc4bf8a57bc8cef991927bb5b3d52b4fdb8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_pigeon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5b9bb57a5ddabbecf61fc020a3aa3b88510e251262cd4a7c32e80ba325ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_parrot-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d382da944d167f9e5c6752efd931a30f5a7c65e8a571473d64ded9825669b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crafab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ca07e6ab79c3b6827ec9b57812cb48ef8f15ad30745bab3a2bca040cba34b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_octopus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3592267c6401f41bbaf0af90a29ee554affe6c811a4cdd6ddad8e5d87ac3861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107560 Malicious code in pvrudy-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c588df01341d9665a6712c7a9645a0aa46334696238b3f370b4eb77847f8ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101145 Malicious code in curious_cephalopod-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97076dc5e00f1d9d83ed2dd4de6c9dcb0a5a2a997e04939ddcdbf700867e3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104269 Malicious code in insufficient_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2b51d7c66cf98c4b3591b1fae5e3485c7bd0265d6f68e57ad222b883d53e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110805 Malicious code in welcome_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661c7dcf079aa8e3444425a256f53ef2e7afffc2ee7ab3739a7363fbcbcf3320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...