MAL-2025-111530 Malicious code in zealous_hedgehog-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd47046b5e7f433081bc943a443c8c34a8f6069e457c455bb9ff20a1ff24d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108153 Malicious code in ripe_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d38c12ab0650a5c44aa1807956ab2f2dc0bbb79291b315a229411c3168a8a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99489 Malicious code in anxious_antlion-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5006f98c55a2facbfc1e7762026843f7513f3530e900c42eca15b18d8eb212bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108553 Malicious code in separate_eel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e305edc5b45de350338503438e1a1ecfd5f7ee636858faa337e2f4394980e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103830 Malicious code in huge_monkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4e1dec8d809454b725acaefa12939f802e50f1014d4cb48e952572e8259cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103771 Malicious code in homely_smelt-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49958b233206364c2009da63536f648a2d939214ec931f6216252dddae746411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110138 Malicious code in united_loon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3369fcdfed5dbcd0bf184f94773a6f6afb7061699a5e6f377bfead1f9e7663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104961 Malicious code in kvgnvn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36cdbeda0d18303fa7faa957e12b2621002d5d9abf7093d03701382d25c3041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106068 Malicious code in mwlxkz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ed60deac2c962bd446aef86f5961cf107e43f573d4e92773f36cf58e19346f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107138 Malicious code in poor_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7e1f56d603cfa59458eadb5ddf8295463f501d7e1e56018c37c5f4373a384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104965 Malicious code in labour_ferret-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee8019964dab2a4a89613d389873258efc3e6b882c22451805f57323862d8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107189 Malicious code in precise_gazelle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7140bfbaaed38281216745d86bea9c04ae36fc34bb9a3896d25d9ba9dd50183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103301 Malicious code in good_raccoon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3668aaf95020745a61708a60139a112c2d0b256b1994fc5ecf7fcf2cb7ea14a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107407 Malicious code in psychological_boar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec7e16970833ce2f0733631a03326474c1f9196b8117793ad7821c3ea5430eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109037 Malicious code in spotless_mouse-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d3070d06c55d4cdbad9e15e4214da974d5389ebb4760499ecea28a719e48a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101792 Malicious code in dsilynor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0566bf601fc1d2587cf3a8813df29d54ba128a1fc7ec62303197ee0a5cd9cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102977 Malicious code in functional_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fb24c2fb17ee5ea26e4e8a2329a964e32ce9c30d2fbbc5feaf9ba40ac8b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101634 Malicious code in disgusted_prawn-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12382e649cf8256861890c8f34055f504b07e7e6becf3790d9dc1c660e2b8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107290 Malicious code in prior_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bec7b3d63058dc8ea1273b6b0798a203a4c7d92c0ea8df2d8d6751503942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110634 Malicious code in vqjvop-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218ac014be7ed9f197f64b495b6ef341585d41c327ceea1df2e19f86f5d781be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...