MAL-2025-102275 Malicious code in eventual_mole-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8370273611d85cc81887a7c2a3151dbd510ca4e194a8647c004104341a43935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111570 Malicious code in zrcvyc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483c60d75b19ac41ca8677d09c9e2a9080c7b60a6dfe2d10a6a5e497e82a2cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110360 Malicious code in various_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b50287f569200f49ca2d2ff0ce138e2ab3ab2e530eaa787d9a2950a649387b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107408 Malicious code in psychological_bonobo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427bf408b55060b6076358f7d037b0f267cbb1d1f28e37b2e1615bbccc83bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107647 Malicious code in quick_lemur-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ee011a57b4701dd80029add01d2587b9572adc2baf60cd8e64ff0dc5cc30d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100906 Malicious code in contemporary_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847bf5f54bd22f5cdb107591c7c81cd65a4577b0f01dc3600a2c1b3ade4a4d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108476 Malicious code in seblakkuah38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa473da9ac2c08ab5696327b9acd4c06c0eabc92ebda9a6c11926ea073eafd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_ferret_blue-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bff7397826957fa49cb5750d11fe86dedab10daed7c5aba3238ce7d7097624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_hedgehog_pink-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd46d9fd3f16db366a2ec4b658da3daf038d714dcdc7b9660d12a77f59c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap_anglerfish_indigo-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea16352df76b13d7e4c9b4678459f1126b5ad1a21ed8ca22ecb6b3514532e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107155 Malicious code in possible_bonobo_crimson-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3050041090b08dfd57bf5f9556f4c6c36b3478bb5792747d7c5b7b8197436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106396 Malicious code in notable_tapir_salmon-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ed0c3df4002e1b1b3322c37c4afec17f763fc33f054766722fb917ad3d5374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108597 Malicious code in shaky_chickadee_crimson-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac683576125faad821d6328f7fd2ef518655a677c23fa0e09eb8353a65aa234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105865 Malicious code in minor_felidae_coffee-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01edf65848f11bf33bb396a670462a8b1ecc9617ceab0f21b664417ac64bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108993 Malicious code in specified_gamefowl_copper-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6327d105041fe017be09cd788e8aae2968c772a40b35e68edb177c7d1ea168df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_macaw_gray-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adf8e44d1d908c677965e9343b90daa9b4f30fde8cf27733508b788facb1ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voiceless_spider_silver-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe69a43698ddb848a983c04bd410d9fbc50bbfc06ddc861a445c1e488d4e3a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_sloth_jade-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc87b8a9fc5dc624b3d4cf206dc36de9f63e627e2ea97b82ed8437239064d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...