MAL-2025-109281 Malicious code in suitable_cod-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b022e81d82b49c440d7f7bff80ef97cfe9e2f8d65af92302c4553323361b0817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111324 Malicious code in young_viper-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d905a470780bbd194d657c28e493ccced2de24da1960f5573c1db217a36a8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105076 Malicious code in lentengangkot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb7db8c7f0f16c3515e391747b53944600951f72c88228f8536ea99db56a966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103433 Malicious code in gviwau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c995641086d140414d6386d3c7f51f646fe1924fc1d5fc7acb65398b8ce5283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108861 Malicious code in smart_rattlesnake-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33317bda0bb965a431d8f927f535dfc2803b91ea9846b046f105a82efb9fe2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101011 Malicious code in corporate_minnow-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8c694f8ec4ff704611cd757272d7d37d1281c32f52fcfba1c27cecf0683b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108492 Malicious code in secure_albatross-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7029ed00173e5ecbc28e1d58e9b47bf523f8c4d829f895cafcb661f9215f99dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103368 Malicious code in great_bass-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8be4b6f97a4ef1607cf96d2747c2a68dc865c46f44bb335acc5f11450175d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106293 Malicious code in nfpiah-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6364b4bbacbc933c2256c72258e25fb5af909fb3c07d0aaaee5a74f4060244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102027 Malicious code in electronic_boar-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5a127f729e00a29e97c781bc3c1600eb4f0f4047981d367cffbb8f924af5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99814 Malicious code in bawiwn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dada283d2a00c3b0d45cfa2bd4e2401c213c52e5f45fb8474ce2d8513acc0c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99727 Malicious code in azgxqa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23b787dc8d3cfbb3ebacb281db35325ac5984a3b4f33cfebae2b31f080beb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_crane_magenta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dba140b3a88f7277900b6fbdb053e653ad5529aca1c45a4d0fb0956efd7f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109836 Malicious code in tricky_python_indigo-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3ddc0cfa814aac30ef503d8f3fcb24088572688f875dc8a972181c1ad7f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_platypus_blush-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e3004399bfaef250895433e4b70b09665d06aa30e2acdc5226b8c6f515f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105865 Malicious code in minor_felidae_coffee-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01edf65848f11bf33bb396a670462a8b1ecc9617ceab0f21b664417ac64bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_antlion_blue-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e08fb65ff27919834cd6102a952602ceb31727745b9ff281b422fc005d8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_loon_aqua-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c92882fd92dacde956da675f10f83ee743a283da03c7887b528ea2c46ffa0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_finch_peach-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442a587228c5e5a14c0fe7f8b1373444397ca49dd5f9bb82f56d0681fbe75c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...