MAL-2025-107273 Malicious code in princess-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223ef32bd9ca4d176bb832a475f81790d3d4a625b0046c187b43ccb54d857ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103988 Malicious code in implicit_amphibian-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6081684c19463c57bad56d6a2d97a39d00316404be015b9196d45c6e8aaa8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106801 Malicious code in orildyn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6990b6902fbfdcea9fa065f255fe5d265f25042d61bc17cc0079641527746f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109015 Malicious code in spiritual_bug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f1198751f14e9c5684508db09a9aef3965e3c203af6aafd1e89cf520707c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107788 Malicious code in recent_dinosaur-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262c852709b4b56c9516a1aae9866ec5b79239abbbb3de3b3e140330ae721b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111345 Malicious code in youthful_sole-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3329bf16151784da686e6eb4179ee00db45c1908eea088895b822f6acee23072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101173 Malicious code in curved_ptarmigan-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd169682dc73394a2775a722aace0f77e6d1111e8a6fc07235ed902e5b08d3e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104446 Malicious code in iuqkus-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1623b9ee5255209feeeca56153076f86e89988d5ec2bf77f411bc672e7b569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108574 Malicious code in severe_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8123feb8649e054a29661ce91e8df4f93a963fdd8df04e64f45a31e8c7bf8ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101855 Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100050 Malicious code in bored_jay-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c36149cdf17d5903dd3152e3fb5de7b075ed9b28f8fc338e7a00cf77c65edf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105752 Malicious code in mechanical_swan-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab360a403d65c6ff03478509e9f67237046dc8cf579aaf66bc58f342b8c0379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110088 Malicious code in unexpected_canidae-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4580036b3af6f72cc192bd29fa6c6f3843e9fe62a9c579841fc290936d486ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101250 Malicious code in decisive_meadowlark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d93d8c6b407ee52bb1d8e65f61755b001e6f12febfa6da650383798d67f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103946 Malicious code in ill_dinosaur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f82207fe8de7fa103278b67da37c02f9f007d50db07a7cbd86fabd3031e0d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105368 Malicious code in lrqkkz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588ba6f094274a0f0304a7cfe4bcd911a7ee1116032d39036f00673a7d4dd1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless_parrotfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdbc8c44a6ea1372dbbe106ab443345f40841193a1bc6c9d28a46bbbdb7930f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103062 Malicious code in gastric_flamingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e6d498c236681a6c2af7f48940fd8ad2f7611b6fc2ad8ac2a5c2f36fc8a87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cca6992074c307da0c018b9d6cfcb2198d0a942f03ec4679b429c98e5dd793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104277 Malicious code in integral_leech-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afef20abd0daae99c81130d04bb3ea23b68d0f186b2c34831571b3db3d9467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...