MAL-2025-99031 Malicious code in able_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14ca669678daf2926d030d13337c7b33ce140e75effa1f40cb6eb0c972fc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104541 Malicious code in jealous_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad96bbb5efa066290b226586c0a6656645f6364c2a75c01704f243f076330bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99814 Malicious code in bawiwn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dada283d2a00c3b0d45cfa2bd4e2401c213c52e5f45fb8474ce2d8513acc0c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105076 Malicious code in lentengangkot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb7db8c7f0f16c3515e391747b53944600951f72c88228f8536ea99db56a966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99223 Malicious code in aerith-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d79ede5dc5fe4e4b5632fdc123c5bc657f5abd3a6f7e1adc53245280dd15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100305 Malicious code in central_mammal-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfad6716f71da4a8a30461285e8671ce14745b752b329700a96fb276efe444c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101589 Malicious code in direct_lynx-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e044307dfee90d726bcbd8bbd178b765b997b549daf2cf323ce42a6e959bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103611 Malicious code in harsh_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b3eb354993471d21600a2f3ea8a3f93565740ce68508b28b9b05f6fdf9817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110458 Malicious code in vicarious_reptile-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d251b9f962e186c4e2336d9933206b5b2be81a0277e6fae52cefe295042036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101011 Malicious code in corporate_minnow-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8c694f8ec4ff704611cd757272d7d37d1281c32f52fcfba1c27cecf0683b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108806 Malicious code in sleepy_kiwi-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b033d640c89638d58f08e044927d44c7078fc57668f828604a9e92a566457811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104839 Malicious code in known_bee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84351eb3a3e6f98bf996b2e5226000833a80a25cb890e1b0fe27a15ac20c1e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111027 Malicious code in worthwhile_ptarmigan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec363d2e27f438efa45944f7631619c0af02eb942adb7b6abf248759614f21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109860 Malicious code in tuna-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11aff4df951317030df43414b9631974d7920f314f6f66d7f220c72f04b978e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110227 Malicious code in urban_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a110f635b769e91fdbf785888354f84ae408eaf237f9391320d55c3236a4b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102374 Malicious code in expensive_roundworm-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e40d4dd59ce6497e1ae95a347a9cfa40f8e9767ef3e36cf87cfec7f6b1d877a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105509 Malicious code in main_koi-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c94d80d252925abd33430e73cef47d292d0009597c8bbc24494108792b1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109577 Malicious code in thalheira-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397a9877787edfc7b4284845fcb115195be1704b953692a77e160291077247e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103433 Malicious code in gviwau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c995641086d140414d6386d3c7f51f646fe1924fc1d5fc7acb65398b8ce5283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100834 Malicious code in confident_toucan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc92420dd7ca64e458044aaa0144643786019b9037ab12f6a5fe6f5b462d710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...