MAL-2025-107149 Malicious code in positive_dove-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa1a7f84d1fbbd4f8ad86fc46028564d001229f3ce8b277a588c5d5a4482818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105940 Malicious code in modest_toad-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e77864798b0be7cbdb663c89c11eacd5195fd481a2a364ba57dcc9928d994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107119 Malicious code in poised_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7dc115fd587505f587715c0b1a9a92dfa955881e0bcfbc3f9067c749b17e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108058 Malicious code in rich_trout-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b7c64171431d1b16743fe17f16c0de9f9d24874d01fd61a39e168a89d63e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105369 Malicious code in lsoiqi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d87798c0fbe9c3c624f08ef9dc030194626fce84315f2d84e82e4159aa9d5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110079 Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104277 Malicious code in integral_leech-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afef20abd0daae99c81130d04bb3ea23b68d0f186b2c34831571b3db3d9467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109241 Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100027 Malicious code in blushing_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ab031370da8697f351ce9a6dded95bb0864f4cf1d2816f6d6dc09959d8148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108869 Malicious code in smiling_spoonbill-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104529 Malicious code in jcxgnj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b88f8b822790f408090f090e09702928972d16314d525ae4d325d4b9fabbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110458 Malicious code in vicarious_reptile-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d251b9f962e186c4e2336d9933206b5b2be81a0277e6fae52cefe295042036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102666 Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108329 Malicious code in safe_clam-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0378d9ffb3c3e5a740c893c6809f4eee5e89acb651484ebb0669f5ba07d4c1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99952 Malicious code in better_roundworm-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00436f4ae04b585a3251b45dce629a1ed8c9364d10c4fbc0f96bf371791ef1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100086 Malicious code in breakable_badger-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8fae15b2d0078a0f286e9961a3ad9368b2237418d917d3be8ab0bb7c0822c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99027 Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109414 Malicious code in svqkuj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0434ec3ffb71e9d31eb65f3c696890ac0860364a2ac51b72141a601695e3f6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108652 Malicious code in shy_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e428647ceb4fd4d99bf1f6ae12a0695219f771b8b2bbbce7b238cde689857fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110075 Malicious code in unemployed_newt-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efef82fff99de55a5cceeaf5a34713320e5f7eb44a72da12d1cb670dc59d4f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...