MAL-2025-109907 Malicious code in uahrzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9008ae6e7e7a7d409c4fca865b407f059943815a636d600d10525dbd8fd335d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103099 Malicious code in genuine_herring-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d29369f456300a389ed83a5095cf4080e0949835123621b77fced63f079cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105769 Malicious code in megrbz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c50e68545e93db6de7eba15af2d2b51ef4f93b1c746c85d13dadece3a2786ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107189 Malicious code in precise_gazelle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7140bfbaaed38281216745d86bea9c04ae36fc34bb9a3896d25d9ba9dd50183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106884 Malicious code in pale_earwig-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1128d013a065ac93dfd1737400893304ca0045e753f2d33ba6ffdb9ee3f54090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107673 Malicious code in quixotic_cicada-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a7a70b31b4f0f551b1525ff12f4120e12df3540be2f9efb5b319ea64c3bd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111570 Malicious code in zrcvyc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483c60d75b19ac41ca8677d09c9e2a9080c7b60a6dfe2d10a6a5e497e82a2cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104205 Malicious code in injured_angelfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d82bb45e4e42bbce462a5acdba3e308403f7429f0e997e6c6adb37a2c37ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108540 Malicious code in sensitive_cat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61a857ecf93af12ca321d328488a53b1196cd7039c66b40f8b4f02a00b7d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102869 Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105921 Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99489 Malicious code in anxious_antlion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006f98c55a2facbfc1e7762026843f7513f3530e900c42eca15b18d8eb212bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100735 Malicious code in compact_rook-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d989229677f79a8e13079ab8345d0f7552831845fdd065378ddb6b0654e36b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103306 Malicious code in gorgeous_beaver-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c8182fa8d975a1c38ad97aace48b63fec77a52b17f69efb076f4177e49b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102364 Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102404 Malicious code in explicit_marlin-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6c3cbc08c4102a42d3dcb77297f7cbfcb3ae7cfae4e1d163b3635ac412dce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103432 Malicious code in gvbhps-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a735a8cca8e3e69b26842978eb87883829fd9eb815a25a4f9b2686eee76ec10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100826 Malicious code in condemned_mongoose-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c619edab38738bde981b159a0fd775ee5ea6b0e77ba871bdebd526176469643b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111250 Malicious code in yavjep-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dda01c4becaa9a20ae4b0fecf7c00057ca3bad6e57bebb29710e9e5c70db6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...