MAL-2025-108849 Malicious code in slwrxu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40609334f486e3638a3819f834cf8e39b963bcf233891b30c8fb7e92febeb6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103707 Malicious code in hgkzrc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba9eda2010c04c284344686ba016c49e8473b45e8d2d98952683c95a7b2b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101334 Malicious code in democratic_gamefowl-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934b3806a72842476c41178e1483555151f2d54c65872cc3c20490fa6dda71ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102848 Malicious code in following_hummingbird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613bdf8dd4831c9f4dd47476d71fbb307e57fbe083dffaa8ccb6bd57fdb53b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107657 Malicious code in quickest_woodpecker-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f592df82d9c0671aead367d26cc922ace2f2719654c3f1d233355473111e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99972 Malicious code in big_wildcat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4486862fae00c5e0a3a28d38e8cd733fc98a267775c93d3a7f9d650dfe3dee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103602 Malicious code in hard_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9768bce12c6db02eb4c67542411b3116f45d9495c529a4a44bafcaeef98ce948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101219 Malicious code in dbvahy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d0505f863ab64fd74066cca585aee329aa91f182e9ae382b378767607fb2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111306 Malicious code in yloomz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b350257634b6c9a805ca7a5a4e42f3f07237f9ff2db3db0b393aaf8d62c8d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111364 Malicious code in yummy_termite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7906df8edec2d798f7cc0ecdcfb756af4f053ef6c2a99e153b08793197323f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102436 Malicious code in extraordinary_canid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126662e4fbc20e6e6e92cad1c717eb276b6d5951b8c7ea0f8587f42d1a1cb3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106270 Malicious code in net_grasshopper-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2bd79c83056c305748de73f9c7b04714d8f558de9d7df2295caa3060e5d790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109296 Malicious code in super_bird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1de9ebd72b9ad209faa54ccd84fef2418b5cf089579bdda73facd016b7783b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107008 Malicious code in pdjblw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fb33963862d289e4e3ad9a2073296baca8ade60882be01327bafa4aa1b054e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102879 Malicious code in fortunate_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1b17f0089f09b2b0e23dd44e5c2103c52dbddc2d346186e9e3dc3da7194e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99027 Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102665 Malicious code in fellow_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefcadc74b89fd1f0ae6d8229c13775d3d19d8ec5f086e57d939666cd0b2bb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104720 Malicious code in judicial_flyingfish-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d61939e697f21b4d830f3670ce2463742855aecf639743eb7225151de79adf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99038 Malicious code in abrione-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b96ae4bcb4471e0bdc4c745b8d04b3e50fbefc8c5e5961846982af0c45493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108343 Malicious code in salty_sloth-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdf2786216aa2e6b70e1503d508b4456b27325a9e9b12a04bf6eefb9dd8011d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...