MAL-2025-105347 Malicious code in lovely_wombat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5330aa42ffb7a5af9414e723a39918671c2dad682b31f2a5fcb9286ac16b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109895 Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102261 Malicious code in ethnic_cow-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f185e00a594c2da80feba65a2a039efeba377b537f7e20ad98b03376a8b6a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100656 Malicious code in collective_earwig-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cc041bbab6edac657fc6da01fa4f28776910f6440a79e5327b446f579ca55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108476 Malicious code in seblakkuah38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa473da9ac2c08ab5696327b9acd4c06c0eabc92ebda9a6c11926ea073eafd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99636 Malicious code in asleep_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeecd2f700a598d9c731bf3148782479d8f713495ff50fdd62c7854d3b6aa6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105085 Malicious code in lentengstasiun-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab255cabac263015497626b1ef9a387c86e9176c124fc0d165d3a64a807a981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107353 Malicious code in proper_blackbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ec51eabdf4988f0f98911de848d9b55819fabf614d02f16971f79e8294bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107408 Malicious code in psychological_bonobo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427bf408b55060b6076358f7d037b0f267cbb1d1f28e37b2e1615bbccc83bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104240 Malicious code in inquisitive_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc656d32680c571742b3a9a5f41e76eb5539acadb6ef36e05018864b655972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103250 Malicious code in given_goldfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198789fc48a1b491f7f959ea930c00345c5b21b97e509db0c31610025594b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100075 Malicious code in brainy_partridge-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972185395c1152fa0b326b8a822736abe6126b8ca40c1cc6d98d669362b313e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103359 Malicious code in grdxww-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca12954d422fc2082858d5e0b104710ebb72604cea8048dac6de690a303bdd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109318 Malicious code in supporting_crab-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09daa3ced0b34997cf25c4a9146f0d16bda4ff244afa3b71d2087769a4dc742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108343 Malicious code in salty_sloth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdf2786216aa2e6b70e1503d508b4456b27325a9e9b12a04bf6eefb9dd8011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109362 Malicious code in surviving_magpie-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daa7b09183c68bf28459d38e8bc71c72facfc059e09c766d81b63b67819af1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100742 Malicious code in comparable_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a299adf417b6672b6cbe894a1c36492c9f9cc7056338f316e761aae8f900597e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108667 Malicious code in significant_roundworm-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f4b75133470121d0517002c2ff053df764607beb59b97e35b15582a086653e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110247 Malicious code in useful_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849f14a16db32f376e87c29a4a1b7eff27892636f92c955668d2e772f8f4e19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...