MAL-2025-106373 Malicious code in normal_peafowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d36f50f656b034c10845d4b61d0cbde99cc706ed6ac8258d2f4547590ce3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107072 Malicious code in physical_bonobo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc9dceb57337bf44f18f55b4aa62776f502b1bed60e69794d9ddde4a2a02bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100856 Malicious code in conscious_felidae-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc70fe08494ef4f8f7cff58827b8b9d4cefe05e159a3ff22381ebe3b047e4118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102373 Malicious code in expensive_planarian-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ceec27fe86757d410aa097de6eb9ae2e9816945e5a19efc343e55bcf1db060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110033 Malicious code in unaware_marsupial-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56ba771a6b655535e524d907d3c07c451351f19ce1c30aac97e41cbddd40132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102674 Malicious code in feminist_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e78152a8aec9a5061cf11baad87f57f85d664312384ec12b6fdacc562dbe51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110629 Malicious code in voluntary_fish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0afb5b08ec0a8d9f7a3f53277ec5b15900c3cbae2c8b2769f83931991230e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104225 Malicious code in inner_barracuda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3228ae51adc666925758714adecd54b4b8e66840dfe841b62507923164a3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105084 Malicious code in lentengsoes-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d291643ebd9fd832ed0cda01a9d4cbcd4823f78ce764c4f8d70e46998b59201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111250 Malicious code in yavjep-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16dda01c4becaa9a20ae4b0fecf7c00057ca3bad6e57bebb29710e9e5c70db6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102942 Malicious code in frittata-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bc6ad4b178e31b952b2af72d550477373129fed670239cc5fb324640961059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108611 Malicious code in shared_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b818c1d129ffb3575fe48bb0928c6d33fd6e0ea9269b51b04cca49173b4207fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106884 Malicious code in pale_earwig-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1128d013a065ac93dfd1737400893304ca0045e753f2d33ba6ffdb9ee3f54090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109907 Malicious code in uahrzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9008ae6e7e7a7d409c4fca865b407f059943815a636d600d10525dbd8fd335d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100342 Malicious code in characteristic_whitefish-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa0d57056e3efbc3a105bdb76ebfd473415bccafe8426aa3b062d2f15dd66bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109047 Malicious code in sqpoox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5110203a5b460379d0526877be33a4e55ec12b790b6d0b14f3c37e30063cc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abaac2a5a0b8170c56d41f2f09444a32dffbdb8fb3e10fe8f927add3e9653c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_fly-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccc6c8d85df30e3e3055ac38ff48a6028b2dbaf2f9e250e9a33746f14674859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous_gazelle-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0741fba236a4032664d6262c17d8a780ee1efd4f5f1092707748091c46c908de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...