MAL-2025-105670 Malicious code in mature_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb624f4f0a12de65351358f6f4d64f8b71095c5dab4e0ef831af5b7d84257ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99875 Malicious code in beautiful_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf72fb7258f3ca98202f0a6a04b0647a4fe6457a8a036cde296324c0b5be616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109018 Malicious code in spiritual_jackal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3641fb955426607d4527d63c26235b083971858d8c674119aed78ba26d766f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110256 Malicious code in useless_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fb59a27eca40d45301ef4e1bd1e1e5caff73dc5a6845dc78f86b91604d95cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99403 Malicious code in amused_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc39d83e72b7b30d3a2a2a743e2ff4cb54a9740b96ff55cfabf40bf3850fde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111301 Malicious code in yielding_roadrunner-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd7018b46bdb796bca285526d3a8612642e364ba0dbc6faaefef3bcb2313860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110180 Malicious code in unpleasant_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cf403f4bed14298b62139c1c561d8c72dfdb727f142abf9b49471d1b55af26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105729 Malicious code in mean_armadillo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381bdb43956b46b4775a79e62c414fc663906cf40221da5cb983dbb1c997e1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101614 Malicious code in disappointed_jay-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb68ad302a3c0d8077b28596e03e7c25af88afa027e63ff036d25d5b71d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103614 Malicious code in harsh_sole-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcbcd9f23601a2f2f5e2a703a288a75a8576f2dd2cdf026db7f13ee99aae942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100872 Malicious code in considerable_ape-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58952cf78fc5102e58ce44501155c7b26ba92c490c2eb1bbd6b4f3a98d41337d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104225 Malicious code in inner_barracuda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3228ae51adc666925758714adecd54b4b8e66840dfe841b62507923164a3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111268 Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101589 Malicious code in direct_lynx-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e044307dfee90d726bcbd8bbd178b765b997b549daf2cf323ce42a6e959bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101569 Malicious code in difficult_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1370fc4813066876be453b2f883cd255542b6c297a65e9b006e076b81100c339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101860 Malicious code in easy_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5a8fb2b85b8fa2f90da1ea854702851cd86cac8cf7099b71313961ffbc07aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100196 Malicious code in burrito-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f17a38ed4925463fb0fb536a3177c07021a5a208e0f595448073c64eb8dad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104205 Malicious code in injured_angelfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d82bb45e4e42bbce462a5acdba3e308403f7429f0e997e6c6adb37a2c37ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99931 Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...