MAL-2025-111570 Malicious code in zrcvyc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483c60d75b19ac41ca8677d09c9e2a9080c7b60a6dfe2d10a6a5e497e82a2cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luccy-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e361e51f1a0cf64c7b5cd0c40449bd026c6e747bd298f00948b46afaf99b3de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107647 Malicious code in quick_lemur-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ee011a57b4701dd80029add01d2587b9572adc2baf60cd8e64ff0dc5cc30d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107408 Malicious code in psychological_bonobo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427bf408b55060b6076358f7d037b0f267cbb1d1f28e37b2e1615bbccc83bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102334 Malicious code in excited_earthworm-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c83cbbf286d8cb6cb478ffe632b4b8803166e5827814c637ec3d192afaed36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curious_cephalopod-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97076dc5e00f1d9d83ed2dd4de6c9dcb0a5a2a997e04939ddcdbf700867e3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107355 Malicious code in proper_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c756bf683dee1c6e54a5e8ede3dea5419eff438e3b8e7235696a593b9108426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_wildebeest-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfab4421174050c7dedebe393a4943a2157351ced5ff035884d938787cffb300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110360 Malicious code in various_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b50287f569200f49ca2d2ff0ce138e2ab3ab2e530eaa787d9a2950a649387b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111137 Malicious code in xzepdx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ad549d13d0c3000aa8fbc845df9d5c6c4ae172a425d025433c4258449ad255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108343 Malicious code in salty_sloth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdf2786216aa2e6b70e1503d508b4456b27325a9e9b12a04bf6eefb9dd8011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100906 Malicious code in contemporary_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847bf5f54bd22f5cdb107591c7c81cd65a4577b0f01dc3600a2c1b3ade4a4d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109042 Malicious code in spotty_orca-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cb2ee60a2492fa0868cc9248e5c0b5e4755b6f660810423e4655bc066c9ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100075 Malicious code in brainy_partridge-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972185395c1152fa0b326b8a822736abe6126b8ca40c1cc6d98d669362b313e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_antlion-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c484e33f1c04b6bf94c9c7884d23332e96c4fc520c2353ff1ecf3af365f82598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100656 Malicious code in collective_earwig-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cc041bbab6edac657fc6da01fa4f28776910f6440a79e5327b446f579ca55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108859 Malicious code in smart_coral-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c72dcfd5e5e04931e0b9a90dd6b39432b57ae85dd37378c6e922d8743ca983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99636 Malicious code in asleep_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeecd2f700a598d9c731bf3148782479d8f713495ff50fdd62c7854d3b6aa6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104279 Malicious code in integral_pinniped-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a244dee13304550e2ab277ab05ad4939fced5ea6252c8aad6e60ce485b1a3817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...