MAL-2025-100027 Malicious code in blushing_amphibian-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ab031370da8697f351ce9a6dded95bb0864f4cf1d2816f6d6dc09959d8148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101813 Malicious code in dumpling-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129724a03b50588d7bd32087db5a992d8b687f866a0765ba31e28f5929308e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant_bear-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892d232f67bdd3ba661d6e1130e8282a4200a9b543cbfc81a7fcf8286d095daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_sparrow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625cf46df8adf2310c36b78f91ceb9db843c5b09f1ad9e3257b30432177b4d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103859 Malicious code in hushed_ferret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74439d0c75777d75986c1de86e4eb112608db2663b78963a219701e9a283079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107119 Malicious code in poised_giraffe-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7dc115fd587505f587715c0b1a9a92dfa955881e0bcfbc3f9067c749b17e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105940 Malicious code in modest_toad-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e77864798b0be7cbdb663c89c11eacd5195fd481a2a364ba57dcc9928d994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110079 Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102666 Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103335 Malicious code in gradual_giraffe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1813fc84342cf26f87bfa12b0f8e7b7b4d3e645784d75fa1b6b4befe9d0ac5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_gull-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a106c91eeef486b4fd57ce11b3cb6372b617a61e1716cb326f88b4218c2789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_parrot-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea59e72e3a7e06f73e07ceb1f05a8b1645be0c32e097244ab76d4f5a04d548d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104277 Malicious code in integral_leech-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afef20abd0daae99c81130d04bb3ea23b68d0f186b2c34831571b3db3d9467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_eel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0911dbfdd1ec7014bf298b887eb25bbe97601d17701e2dd16745d7024c59f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c844b7bb9a7b8543413bd39ad20aab37c40893ffb079b4efc22c9bb1151d6198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99952 Malicious code in better_roundworm-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00436f4ae04b585a3251b45dce629a1ed8c9364d10c4fbc0f96bf371791ef1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109414 Malicious code in svqkuj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0434ec3ffb71e9d31eb65f3c696890ac0860364a2ac51b72141a601695e3f6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100086 Malicious code in breakable_badger-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8fae15b2d0078a0f286e9961a3ad9368b2237418d917d3be8ab0bb7c0822c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106301 Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...