MAL-2025-99030 Malicious code in able_flea-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f899daee0c4f4c55388905e2e925d44a19cf016306c5ece9135ed2a2e6442cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110634 Malicious code in vqjvop-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218ac014be7ed9f197f64b495b6ef341585d41c327ceea1df2e19f86f5d781be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110613 Malicious code in vodwup-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3c910a1ff9438009e5895d457d67bc9cfe726c319372dc30c7949e8bc6cc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103925 Malicious code in ideal_wolverine-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2fab45ce587cefa8d6f65f177d8a6a92e18ba5316de1c5baa8c9a5f01a010e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100342 Malicious code in characteristic_whitefish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa0d57056e3efbc3a105bdb76ebfd473415bccafe8426aa3b062d2f15dd66bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107072 Malicious code in physical_bonobo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc9dceb57337bf44f18f55b4aa62776f502b1bed60e69794d9ddde4a2a02bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100837 Malicious code in confidential_catfish-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5981b419a65046ae3a8cf884d09a41b38963a0cebc2b5eda116b854477f3adbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106855 Malicious code in ouvhww-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f261770e31368c9d89a6cba34211d825117a6aa6d4113a00a5a56d4f0f0cea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105877 Malicious code in miserable_bedbug-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcae94e9d95cee1c8be0a14871595caf4ee08694018684d8430a7c7720ca6d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105347 Malicious code in lovely_wombat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5330aa42ffb7a5af9414e723a39918671c2dad682b31f2a5fcb9286ac16b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386adc890e727a2b22ab432b06ce772b495bb19b761adef62895f077b601cd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75af6780550c1c6e47c55cb1c9e343951b31d679f40b992611bf355116fa0282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1854e712f3549d7634527a2e979ea603098bb3894b740f862f70b8f03d10bcd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd96b73c029919681b6f5b02f73937186822b7d979a8427d4665b9e9d928eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slippery_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff86ddc4ab6cd64dc1e8e4870f653e583b0caacce6829fe5ffef0616ed4c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73967df1faab21d903265b8d31b8c35c427c204638fe0bc57e0c7333c219ad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a21f09f7cd8beaf6ce2247977c45656399a7dec4751b9db68fc1f6226c822d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99241 Malicious code in aggregate_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ed7cc39d4b02da315eab46ca5953d040a48db38e0a675974b602e76637a336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99257 Malicious code in agreeable_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a548f467639460569301775c48d02623d09287b09e7c29baa5f877cea2ce02c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105201 Malicious code in liquid_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ab0fb8b231b2502adfe59b0e2fd11959d31b1cd150aafe2737ba5ae8708f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...