MAL-2025-106932 Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110970 Malicious code in wittering_coral-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5e9912dc02071212c2e20422bb73ea1be66389d1d55aa9607070f185c559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9768bce12c6db02eb4c67542411b3116f45d9495c529a4a44bafcaeef98ce948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106778 Malicious code in ordrgo-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ddfdaa5b3dd8866fa8ae7873e2c217896289f4ff58dbfe169b10efe36aab9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110312 Malicious code in vague_lynx-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9f22937d88e4eb2b0d8d1d0dad8673af17336c342ae18f03ca784628c70d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104491 Malicious code in jack-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176756f10cbe7ea927483af836e3058ff0e67bba222bb35ef45967deeb19dc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108463 Malicious code in seblakkuah26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbab68f5f804c0ea7ac1ab794e0ba2ef5215cb52fb4237c43a27126c0b801ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101668 Malicious code in disturbing_hookworm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a578452b9fc9a222763002529f30db75a83f89644a85476ce339b8ab7e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111136 Malicious code in xxtmzl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596fec4920ed4699df8f0540087a702fbb43649de3a496e38a829be07c4a5980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100954 Malicious code in controlled_tortoise-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cb1ea9e7565c88b583475810ed6bbc713cef1de8d67183bdb86fa333b92072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100129 Malicious code in broken_crocodile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcc9e58630b5c14fd145c5572bca038098a123791e324700ee9b568fdab4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107400 Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109895 Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111030 Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102882 Malicious code in fortunate_tuna-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf0a819a82d584ca4f4b184b2adb0c57c75d4fde8a37aaf6eaf0ffeb38cba33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100944 Malicious code in continuing_otter-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c986a08a4068aaecd1dafa8258c46b7835d238545f115457cbe34609631fbe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105075 Malicious code in lengthy_snake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd4ee42d8bed08b8c36f5e159bdc9b53084900a612fb94a0ffe05a5f6919f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109343 Malicious code in surprised_perch-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e2f5ca8fcfc84e386b9b88c576776e654bf086cb6a48e3fbae20bf32e98ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...