MAL-2025-101855 Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109015 Malicious code in spiritual_bug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f1198751f14e9c5684508db09a9aef3965e3c203af6aafd1e89cf520707c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101250 Malicious code in decisive_meadowlark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d93d8c6b407ee52bb1d8e65f61755b001e6f12febfa6da650383798d67f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105368 Malicious code in lrqkkz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588ba6f094274a0f0304a7cfe4bcd911a7ee1116032d39036f00673a7d4dd1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103988 Malicious code in implicit_amphibian-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6081684c19463c57bad56d6a2d97a39d00316404be015b9196d45c6e8aaa8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100050 Malicious code in bored_jay-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c36149cdf17d5903dd3152e3fb5de7b075ed9b28f8fc338e7a00cf77c65edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106801 Malicious code in orildyn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6990b6902fbfdcea9fa065f255fe5d265f25042d61bc17cc0079641527746f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104277 Malicious code in integral_leech-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afef20abd0daae99c81130d04bb3ea23b68d0f186b2c34831571b3db3d9467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103946 Malicious code in ill_dinosaur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f82207fe8de7fa103278b67da37c02f9f007d50db07a7cbd86fabd3031e0d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104446 Malicious code in iuqkus-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1623b9ee5255209feeeca56153076f86e89988d5ec2bf77f411bc672e7b569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106500 Malicious code in obvious_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08505bd80ba96bea4a0205344f2066291fc4cb13f261b97089abf3d7abdbdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108574 Malicious code in severe_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8123feb8649e054a29661ce91e8df4f93a963fdd8df04e64f45a31e8c7bf8ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105752 Malicious code in mechanical_swan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab360a403d65c6ff03478509e9f67237046dc8cf579aaf66bc58f342b8c0379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107788 Malicious code in recent_dinosaur-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262c852709b4b56c9516a1aae9866ec5b79239abbbb3de3b3e140330ae721b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107273 Malicious code in princess-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223ef32bd9ca4d176bb832a475f81790d3d4a625b0046c187b43ccb54d857ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105337 Malicious code in loud_snake_lavender-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a0153304f61360dd14bd5dde548863bd0b8ef2c1a85941769b2a0aed7196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100404 Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_gorilla_cyan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4fb54fe60ecc7e1369fce16747a2847ec7c33ec12324e45a00b614a0b1d0445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_caterpillar_amethyst-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed330a1bc3a12b700c5903bd85258e82da4923d5909f184aa04ed76d19268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107663 Malicious code in quiet_marlin_gray-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4390ed3afe73d2d003048efcd31aa77dbcccfce07696a4e12041ea457b0d4599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...