MAL-2025-99227 Malicious code in aesthetic_jackal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc66da08afd9f0578aebccad35605278cddf7ab9de43f6526c08a79979b52129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106067 Malicious code in mwjaul-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3219d3156f80e9acfd1a96d3d0a1a38296ba78eed8c22ea261af3f4ed535a2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100938 Malicious code in continued_sole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd98c601f0f1f3ec534b094e9102aa145f1041cd87045b74e24921f74507656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101900 Malicious code in einthyra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de131486568671cbd7cf862cea447f4248e3f0402ee8bf6b4be16bf9b23289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109962 Malicious code in ukxoku-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17936df2dffc0696ba62849e12678c2e19edc03298446ce97e1e2c544183cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111289 Malicious code in yelping_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9615d737d8a7948dca082203582b86fdebb1690165aed3400e0aa1266e56cd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_gull-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cfd20189d05581419a84a97760abb8be577289d7b58a53be3e345c84f497a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107844 Malicious code in relative_toucan-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a1fccebd8c9d3a64d9c3f41c1245b04f1742b5ce59b1e737119b602eb3b894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100125 Malicious code in broad_sparrow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bde290b78bbb99e6047127c4d4b454ff65d72c1b70514e2d9bed31072dd441c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110057 Malicious code in unconscious_wasp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6b6b02608d586b59914122617c5b59ca15392b624025f4ea3482f305c9a3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_scallop-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583caa49d30cd94d3b1078ce51d1b67e93a8e464005f36319fb49b4be3812296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_coral-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5e9912dc02071212c2e20422bb73ea1be66389d1d55aa9607070f185c559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_macaw_orange-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab039ee6261772f6902ae1149dbec8405fd78e8be1a1a23602e16bd8b7dcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4658986c6ae4ef843fcfe331f36f8a196ef5dc0a6cc5e7a84c0f13efce11d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105361 Malicious code in loyal_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7ff424e6c1ee3a1ff49d4f13d40524bbb726870fe34560ada960b265801385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981fc7a4a0a673cc6bb1a226077b9d702f5c4784d6cf26d08088834568dd9d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102966 Malicious code in fun_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91bc07a964ad73fcb8a38f92cdba77e49566f0f6c13a27ef26069f879174d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101397 Malicious code in developing_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fa5da5577add3a5880f37d12e4275e232428728a7936a33a1b2a3b64a05b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101030 Malicious code in costly_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b986d4b669d821dcd25e705ad0e367f2472c515d973757d5243c6169c3e2b224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1ac0076e76cddb66aa046f8a99c7a1af76fdc002824876b57d9084d2d55372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...