MAL-2025-105269 Malicious code in live_beaver-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66354d4ebfae4f0e642cf29bc8b8d8132d40a15a00631240a3cc64f45d293062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107726 Malicious code in rathorn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f0a1227e55451ab7e71658749fb57bf705bfa0459b6503e12ada45cb42dd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104543 Malicious code in jefqob-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a513142074c91b06eb3f1e9ad7e1084ff7e706cfcfd1ba4eee78a36a4e86853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107437 Malicious code in purring_mandrill-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1843e02b4a3de92299d99217f921a065938bd17d84087032964d08674a2cc286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108574 Malicious code in severe_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8123feb8649e054a29661ce91e8df4f93a963fdd8df04e64f45a31e8c7bf8ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109015 Malicious code in spiritual_bug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9f1198751f14e9c5684508db09a9aef3965e3c203af6aafd1e89cf520707c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108563 Malicious code in serious_mollusk-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68b3f52efb60b429cf70db60e3d470522e0254e2b6ab4885e09257f2483d2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101160 Malicious code in curly_muskox-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710c34efebd7b09082a21134751cddded7794cabd60725d1a8ebdf80f57d2043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110455 Malicious code in vicarious_dolphin-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd1797d414126cfdaa7cd3be716a657324d0a5fb8d73cf2446e289bb959eb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110088 Malicious code in unexpected_canidae-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4580036b3af6f72cc192bd29fa6c6f3843e9fe62a9c579841fc290936d486ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109815 Malicious code in tragic_tahr-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9401607d3134607ec47f0b7447958ba983f7032974aa6f17d77d2ca07a43582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107788 Malicious code in recent_dinosaur-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262c852709b4b56c9516a1aae9866ec5b79239abbbb3de3b3e140330ae721b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101855 Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105727 Malicious code in mdfyot-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788453e87b7e84c2d18922ccd3169d82ade176feae3ccfa1e0ea900198b167cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103988 Malicious code in implicit_amphibian-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6081684c19463c57bad56d6a2d97a39d00316404be015b9196d45c6e8aaa8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105064 Malicious code in legitimate_egret-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3847c75d0f326c4e649811c51f7a1986553d338d6bc1fbb1c1f754cd84f658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105930 Malicious code in modern_gorilla-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aff5fb4fa17e1200b3c6761c181669961d6cf150c4e1f7d32c394cef8471aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102026 Malicious code in electrical_haddock-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84223d34bd695e5cadebff44dff68d145356df1eb4e36ed0ecf9b714d1a51aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106500 Malicious code in obvious_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08505bd80ba96bea4a0205344f2066291fc4cb13f261b97089abf3d7abdbdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110226 Malicious code in urban_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c962a78086fe682f81514aa1d539d009f3f1af05a69e25c72e4c4f643e88656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...