MAL-2025-99490 Malicious code in anxious_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c41006a04f54d2aff98bc7644d16991a7bf1fd97af9148a7fd91d99b94ba39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105589 Malicious code in managerial_marmot-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1697a5005ecca9763a1652ca4e588f3d31ab296a522fdba13f6ff9030ed4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103409 Malicious code in growing_jay-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db676ed811b4cb7fac1c1e6b5a6c1892fef1674f8e5f129f043ab47e14f62244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108050 Malicious code in rich_chipmunk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb6e8c6eab2c2bdc29892c2433fe8286a783b60c8308f03877673c68a4a17a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108413 Malicious code in scary_hippopotamus-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8bb3b449a1f7a6936cd1cac95d3ca74dcaca5f17caa04bdaa60f8d8523ef24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100971 Malicious code in convinced_ape-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359edad6107968037277cbb3e4b9246da27ccbbbdf0e6cd3f4c7a0f39f1be985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110834 Malicious code in whitebread-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ace2534dbf5a1dcd8fea48bc68ba74195c3c3f0c344727f8ff6b1ce92e88172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108914 Malicious code in solid_otter-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7d84c5dab6581b2e2c01d219d561573286fd4521550de14977bc72cf6610f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110039 Malicious code in uncertain_rooster-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c252404069651b8a11c6d81ee6a5eedcf8d645d5412342fffcbabdecf3a171c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103738 Malicious code in hljwhb-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecfe5e9ec4016f18fd6af0a29de472cd365624159544902ee3fdbe93ee48373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109011 Malicious code in spicy_spider-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3493a918c08710a1547c91f0d37addc32bb3625771d0a5254e93106eb67d530c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103711 Malicious code in hidden_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc28685cd763c2b89cd617f71949bcf9d6100697ec78ba07e7e36cebb580726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110174 Malicious code in unpleasant_leech-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a58e14a54043da48538a957b34d7f18e69301a32f7997e0792706aad946efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99070 Malicious code in acceptable_quokka-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354e912b1e2c737eb0df3877f5d60c3417a970138b04215d2a24ca99b78a504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106204 Malicious code in natural_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce26dc1be53ed19e9eda525aa76b4217a1685002aa813a6450e22cdbbbb2d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110344 Malicious code in varied_crab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6027e7c412e189b9cc959c2d4790728112487266e81cc91809011d782e5a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108949 Malicious code in southern_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bb8ebd415f6d7f3857d8d9f93d2b48588593c753f986b4ac2ec4647bb1ef6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110356 Malicious code in various_leopon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4cf8e41f04bdd77627f13189b98314c611343cede8fc000daf5fdc9a5e51884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106611 Malicious code in ojihnk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bd1ca7703f361e07b2835fd01939ccb283936281c7a3cf849bb64ef87a3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105658 Malicious code in mathematical_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9d03570149c456ca7ddee7f265d049aeb8e6845e14504ec57d3958d9a12bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...