MAL-2025-105940 Malicious code in modest_toad-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e77864798b0be7cbdb663c89c11eacd5195fd481a2a364ba57dcc9928d994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105077 Malicious code in lentengflyover-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107149 Malicious code in positive_dove-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa1a7f84d1fbbd4f8ad86fc46028564d001229f3ce8b277a588c5d5a4482818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103335 Malicious code in gradual_giraffe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1813fc84342cf26f87bfa12b0f8e7b7b4d3e645784d75fa1b6b4befe9d0ac5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101813 Malicious code in dumpling-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129724a03b50588d7bd32087db5a992d8b687f866a0765ba31e28f5929308e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99027 Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_hedgehog-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd47046b5e7f433081bc943a443c8c34a8f6069e457c455bb9ff20a1ff24d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102666 Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110458 Malicious code in vicarious_reptile-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d251b9f962e186c4e2336d9933206b5b2be81a0277e6fae52cefe295042036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108329 Malicious code in safe_clam-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0378d9ffb3c3e5a740c893c6809f4eee5e89acb651484ebb0669f5ba07d4c1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99952 Malicious code in better_roundworm-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00436f4ae04b585a3251b45dce629a1ed8c9364d10c4fbc0f96bf371791ef1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110247 Malicious code in useful_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849f14a16db32f376e87c29a4a1b7eff27892636f92c955668d2e772f8f4e19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100027 Malicious code in blushing_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ab031370da8697f351ce9a6dded95bb0864f4cf1d2816f6d6dc09959d8148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103859 Malicious code in hushed_ferret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74439d0c75777d75986c1de86e4eb112608db2663b78963a219701e9a283079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111270 Malicious code in yearning_boar-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0188f6151c52a9e60f94d0df26747061be5ef8ee2f6943a72640900bba63d5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103840 Malicious code in human_whale-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260a3c47fb71c70575ab5c80626779897df3375e8b7e09e426735d3ebce73579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106932 Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106735 Malicious code in only_prawn-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3b06adeb2254f7f4d9b33f60b383f0aed0e54ec8be2abc1cedd550c8eabfe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104277 Malicious code in integral_leech-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afef20abd0daae99c81130d04bb3ea23b68d0f186b2c34831571b3db3d9467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108869 Malicious code in smiling_spoonbill-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...