MAL-2025-102086 Malicious code in encouraging_dingo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af3b98bcfd1a5e19aeef1c9740a2d8fe236a50d87ad0cba8af6ef8ac35dd8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100013 Malicious code in blind_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d8a399f1bcfb7d895b03f1e6058622854c9001db18b5c68ef435959d83289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104006 Malicious code in important_wildebeest-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e2ffcd1324f7e687ca9e689f1bccdb83ba6b8beacf3f83df32dcc435347220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102831 Malicious code in fluttering_flyingfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f1b54701e5bf9f2cf74bca08a4e75934d79c9a68026885d76344b06b13287d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109908 Malicious code in uathal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52b70d19ca5e35a5401145edfd43e4533d8a76962a54e6429672ce81edd06fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108216 Malicious code in round_panther-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009dc36112545337483478ef6de082446bb0bc324e0e5d2d96570fd232ba4c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100773 Malicious code in complex_monkey-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bec9c429090d6c859c96d091477ff4bfbdd25ffbf965b207b7f2bdd4800d0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107270 Malicious code in primitive_tarsier-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58173152257487fe7da75c057097674a036c7ad64bcc29b6e76e9a2ef97b40e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99213 Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102920 Malicious code in frequent_xerinae-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07bb44b0d84bef1a8a627a1b033ff756332f63a9924327c8836c771f5f6bfe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110670 Malicious code in watery_silverfish-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7fd991c6fd93b8a440b250b4b3cc30bd21fbb3cc23394ff1d85819023274f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105873 Malicious code in minor_starfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb217c941d8b5661c99a35e1513f89440dd82c72ba61881fd47efbfc97bcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wdgisf-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c470760328b85bdc05db58cdc358f37f0eed859f34928765d71dda42dc2e499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_spoonbill-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d3765958bdd5207049c17c3eb225ce86292cb975de307b63f1705e18ebc12c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_mastodon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23766432618c03d96f4e0617741cd78ac7b03e2b8bc4907f802f432ca784381d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_spider-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483962f3dc7e3ce649c831f048083cef14c1c53752e121bf68477de274931bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised_chicken-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789e50becdcbda7c1dfa1cf55093cb71e8303b1b53809995999104b4ede6f81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428a02b6ff76a5f55d34591776315055430fa128a248e7af7f560a6e132fe9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_mockingbird-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c2ec799ecb7f370a519665fae70693f81be3a80e273b733e0cf2c02ce7a969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...