MAL-2025-100026 Malicious code in blpnhs-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8608921111fa1ff9d9e9a1b52dc813aa2f07dfe573c32a692c952dbe3aadba7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108453 Malicious code in seblakkuah16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e7dcab8be3cbf1e62de947355ecf7542f8a51669845cfcd024a59cec44d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104439 Malicious code in itchy_impala-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad334becc234d2661d0a676d8a4a9379f00608bde010dbfd2b501151c4491f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109091 Malicious code in statistical_sloth-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb63ba73827ff4867730caa2e5472555fb99f4414a4ab77eb3975c9234a7678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99403 Malicious code in amused_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc39d83e72b7b30d3a2a2a743e2ff4cb54a9740b96ff55cfabf40bf3850fde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108392 Malicious code in sashimi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eeaa658101fb112d7e8b6f00a2925c53d263acd4036b48a6b3add95ea25aee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101685 Malicious code in divine_wildcat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b895e58fc060617a939f55136614d8d71e10d84c0205b2868c0fb7493acae14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105907 Malicious code in mjdtpx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5032b680e5df7bb8d1243136895229153d8e9285ac21f5db2227cb6d8d366844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106931 Malicious code in passing_sturgeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaed4886f0265b162c26d5783281bd2a7925441654c944292991ee87087de7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106560 Malicious code in official_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a03759ef705ec014453a10ed44be215fe366ae87585e1a29f3afe2981f2942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101614 Malicious code in disappointed_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb68ad302a3c0d8077b28596e03e7c25af88afa027e63ff036d25d5b71d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110764 Malicious code in weak_cheetah_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb7e2c7bf43fbe86831ca1e5e5fe1f52bdd5059ad9dad04d562a544f08d97aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388615cdd579942d1fbbaf9ec2246b9f21e66c9d77729c8964b369ea2702be2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing_chimpanzee-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b11db886c81ca51de2d8fd4ba84e91f873b81495dcc67580e15dc95883b099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xpfymn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbba969ad9e7442c01602ec009fde9fc34a8bfb71a52a0fa189d8ff222e6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genhih-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94760b2e2e2c44f4b14e05722e9c88c340a5219799a9ca9ae9a66cedff00945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99679 Malicious code in available_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9160c77caa61d193e3dad9fdb3f05abb3b08ac3da04c1844eeb41b82f7cb9d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101108 Malicious code in crude_bird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce16ff95e3fcf7093434f6e09f7a582534d55a0840e6c3ea00d19898464ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103614 Malicious code in harsh_sole-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcbcd9f23601a2f2f5e2a703a288a75a8576f2dd2cdf026db7f13ee99aae942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104225 Malicious code in inner_barracuda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3228ae51adc666925758714adecd54b4b8e66840dfe841b62507923164a3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...