MAL-2025-109720 Malicious code in tkticb-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb32c2e579249499eecdb9bfb582646a4718902f49e46fc96e94e122c8cb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111364 Malicious code in yummy_termite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7906df8edec2d798f7cc0ecdcfb756af4f053ef6c2a99e153b08793197323f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103062 Malicious code in gastric_flamingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e6d498c236681a6c2af7f48940fd8ad2f7611b6fc2ad8ac2a5c2f36fc8a87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104200 Malicious code in initial_locust-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f292e8bb7e0cc912d0f43a220d6779c825dbb5d191f518130e07644c18a4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110835 Malicious code in whole_centipede-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdf3f13445d0c2f0dae6d3215bd788a121429caad990690b223070bf5f5a82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110249 Malicious code in useful_pheasant-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd37aa7a596afec864bb456cf583942ecd213db8b72ce3c40e79745f00355b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108051 Malicious code in rich_cicada-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3318f3382affa6320ae638b9292d21276b396ca313626751d5f4e26c03472df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102828 Malicious code in fluffy_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46eb0e2975c949923df1ca46d7200f34f9aaf3c4e98afa9709582f66ff43d5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103717 Malicious code in hilarious_marmoset-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c26df3b54aed5c3010d0594a83d898e9e0761b5a455797eb2693f7a13b4e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104380 Malicious code in iplude-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1226b940903fadf84485ccdb2fe8e76e28ec4bf5367b3bd87243e4d0fe85fac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109648 Malicious code in thoughtless_monkey-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a893e57b2b343bd5032fbada53cb1fb726485fee568792cae60d7e49e69e8818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_grouse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c76a11131d20127ba2d18f5d7f1de768c5a7de580e47f16f61ce4c1ff4a17e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_salmon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f113cfde4b4150ec3b35ccbf4cbd74152873dd7d858afec982a736a0a9d909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99948 Malicious code in better_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e8d02dabe7b900cdf9fe936530c754edc020117550164976bc627e083efae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104088 Malicious code in incredible_caribou-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78d801db9fdb93c75bc1063949c41711850034defa575aaf4cd9acf1e5cfbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102706 Malicious code in final_guineafowl-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90863b402242678017543e7d60c4521a7807832a564f142e8bb57408c9fde6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100902 Malicious code in contemporary_crow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c28eab4d79a859359e80d3ea9ed219b985a7a8df53e4c9e8b0a3e7a64db005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109621 Malicious code in thirsty_marlin-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5517df3ad4cbbda98b1e392f5a80e7ac55faa76bd6745c105447b821409a5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...