MAL-2025-111280 Malicious code in yeasty_gull-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a106c91eeef486b4fd57ce11b3cb6372b617a61e1716cb326f88b4218c2789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105613 Malicious code in marginal_impala-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1ede95c1e6dc1a3bf63a25a720a5cad5bba329f54c3dd30e16930b505b4b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103432 Malicious code in gvbhps-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a735a8cca8e3e69b26842978eb87883829fd9eb815a25a4f9b2686eee76ec10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107673 Malicious code in quixotic_cicada-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a7a70b31b4f0f551b1525ff12f4120e12df3540be2f9efb5b319ea64c3bd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100001 Malicious code in blank_tern-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4df4c58f7dd068e3b31f86cdd892beb68ca48cd84bef7abda868bf9a41321f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104965 Malicious code in labour_ferret-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee8019964dab2a4a89613d389873258efc3e6b882c22451805f57323862d8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100579 Malicious code in classical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33dc9e42831c51eed6e3eaf32649fff24becb009f36564575a2c2ead8b0d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102364 Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108540 Malicious code in sensitive_cat-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a61a857ecf93af12ca321d328488a53b1196cd7039c66b40f8b4f02a00b7d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100826 Malicious code in condemned_mongoose-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c619edab38738bde981b159a0fd775ee5ea6b0e77ba871bdebd526176469643b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111565 Malicious code in zonal_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c41d17cd395f24cef1ba920896bf24a416590555e4deca8ba19684efe8d7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104745 Malicious code in jzonki-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bde1c2d7ed3662f5febe38c70fa745ff8132d2665ad874fbc7bff4841340df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103771 Malicious code in homely_smelt-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49958b233206364c2009da63536f648a2d939214ec931f6216252dddae746411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111530 Malicious code in zealous_hedgehog-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd47046b5e7f433081bc943a443c8c34a8f6069e457c455bb9ff20a1ff24d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102596 Malicious code in fat_swan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a69a24efa7b9fa9f2121b67b1ed22470902d625c5f05e6245eb64f47411980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105921 Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105939 Malicious code in modest_squid-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce7b26daac90a8e4a2666ecac25422aa4fafaa112fd9b66120bfcfb105aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99489 Malicious code in anxious_antlion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006f98c55a2facbfc1e7762026843f7513f3530e900c42eca15b18d8eb212bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107138 Malicious code in poor_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7e1f56d603cfa59458eadb5ddf8295463f501d7e1e56018c37c5f4373a384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101047 Malicious code in cranberry-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d304027659209740433caf4910ee8ca8992e7b482f001e49c6e9496907d7309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...