MAL-2025-102069 Malicious code in empirical_herring-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93822fc9e337542b2af4b6b95d3e65e7c1cccb4870d5d7c0fa5987fadb88f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107836 Malicious code in related_dormouse-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be2ff63357bce1d77577ca538b99e651b47e3ea33adbb1b10528f3f9f0f80e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hoxljg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d421c6b6a247d3e65b77f0618967f50d9cd3cdbf2826803f86be825d2d77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111270 Malicious code in yearning_boar-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0188f6151c52a9e60f94d0df26747061be5ef8ee2f6943a72640900bba63d5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107273 Malicious code in princess-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223ef32bd9ca4d176bb832a475f81790d3d4a625b0046c187b43ccb54d857ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109241 Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108347 Malicious code in sardine-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea6e9441ce121d319a0b68d12cb8b8631b5395baded630ff03dacbfe6afc7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109957 Malicious code in ugly_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d723b856ef8f8685ddf7caea0ced4c11e863a16cc7df2210b56cd6902ab2f407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106301 Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107054 Malicious code in petite_lamprey-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee99b9a8593247d7d8f7cd4ed2c7032ee14599262d76ca5c8af4301fc9e5c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107670 Malicious code in quintessential_ptarmigan-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76930c06f021a1567bc966527d595b9a10950688697c345c5c6b75801e1233c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105077 Malicious code in lentengflyover-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_raccoon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a058d777582b13b881ba94c5b5d65b0b1e890875b810c8066be3209db03e1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102816 Malicious code in flat_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b838c9abb2d5191e27008b985d1f250a5b3654a25c1299225b3296f664a810c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107400 Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108648 Malicious code in shugll-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e6f12b28bfaf9eafaa83e32c895b362bfe8e6828485eff37b2928b2dbfb790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103776 Malicious code in hon_silkworm-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03006fd9b338caf9558cfafce97120a720d9482071e99b04acc73475fab6c420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108979 Malicious code in spatial_manatee-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1039c8d6592e39c06cc2a2f453064c130947dc82a921bf501dc2b2e74e0c2b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109192 Malicious code in striking_falcon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e92a67ebaecc98c5e493f67209e9e6c0443cfbe9415630a6d7ec97beea74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...