MAL-2025-104225 Malicious code in inner_barracuda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3228ae51adc666925758714adecd54b4b8e66840dfe841b62507923164a3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109047 Malicious code in sqpoox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5110203a5b460379d0526877be33a4e55ec12b790b6d0b14f3c37e30063cc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107897 Malicious code in remote_spider-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e44d8738db77bb30222435ef2a4175acee147ec4767e84339eff1bcc7de734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109907 Malicious code in uahrzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9008ae6e7e7a7d409c4fca865b407f059943815a636d600d10525dbd8fd335d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102097 Malicious code in energetic_gerbil-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0182e32ad358de7ca728dcbbc87ef4747f1c67f5c644aa10adbe7fab638fb7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106373 Malicious code in normal_peafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d36f50f656b034c10845d4b61d0cbde99cc706ed6ac8258d2f4547590ce3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108611 Malicious code in shared_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b818c1d129ffb3575fe48bb0928c6d33fd6e0ea9269b51b04cca49173b4207fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102146 Malicious code in environmental_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f925795c1392c280541b2428b14c3499279ba366fb2d7ba8e8f0c7188b00b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110629 Malicious code in voluntary_fish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0afb5b08ec0a8d9f7a3f53277ec5b15900c3cbae2c8b2769f83931991230e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105084 Malicious code in lentengsoes-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d291643ebd9fd832ed0cda01a9d4cbcd4823f78ce764c4f8d70e46998b59201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103348 Malicious code in grape-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83e3d2e06cc388db5b4dd35b61235eaab05d0b607eb7f39607b97590b9e6c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102373 Malicious code in expensive_planarian-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ceec27fe86757d410aa097de6eb9ae2e9816945e5a19efc343e55bcf1db060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106768 Malicious code in ordinary_dingo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1caba89ea5a8bf3c1433172bb5175475d943f9ef470866e0770c350dca922d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106884 Malicious code in pale_earwig-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1128d013a065ac93dfd1737400893304ca0045e753f2d33ba6ffdb9ee3f54090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101192 Malicious code in damaged_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98809bf19c8331cc90a45fcd76372a565219999a59e96c6cba2286234b439ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100057 Malicious code in borscht-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76dd3c4fb59ac7837db5a60dfabccdd723caf933c1da3eddca1cf9646ede788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102086 Malicious code in encouraging_dingo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af3b98bcfd1a5e19aeef1c9740a2d8fe236a50d87ad0cba8af6ef8ac35dd8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111250 Malicious code in yavjep-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dda01c4becaa9a20ae4b0fecf7c00057ca3bad6e57bebb29710e9e5c70db6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carsfrot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69dbcc25e94793736b4d945872b6bd7f8c3e0a6fc44077b0bdff9bd9e185391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...