Malicious code in light_guan_z3n (npm)

Source: amazon-inspector 978db7295db9e304b1737a2799edfebeeffa7480e7c51a5cc8aa40ecf184d6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leonard-tea-archive (npm)

Source: amazon-inspector 8a47cf3cfb8296867e4c8654c28fe9e57c0aac86074d3b40e4c02fe2635481b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kisut-faifg-avuffiguub (npm)

Source: amazon-inspector a6cfded8509fd50396aad1a1fd77ca2177eb181eb17a57e92e1195faf957a300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kapo-samnu-maifamava (npm)

Source: amazon-inspector 2eb150148fde44ceace5b9e203ccf3b78dd7db58e189820fb6ecce3c7129b639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in justine-tea-archive (npm)

Source: amazon-inspector 2b45be9368a238b8e91ac8b987aed6a163ff60a33e38cabac620484a61babf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in json-janus-ultra-aurora (npm)

Source: amazon-inspector ce60c2899113f623d8c9ab82a028b70ed0b619eb59c01a6c7eaced7111a8ae1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

OPENSUSE-SU-2026:11772-1 gitea-tea-0.16.0-1.1 on GA media

These are all security issues fixed in the gitea-tea-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in jeromy-tea-archive (npm)

Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jacobs-tea-archive (npm)

Source: amazon-inspector 151d04676eab1c6c6825e9bc27f4ee69ac87e5bcb92fcac0ef0f83bdeac23813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in iwan-tongseng47-riris (npm)

Source: amazon-inspector 7a97f3866cab338a40ac7abd3385ab3c79c55a54b804526ac416599f910fd6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in itale-adci-ggryuyegfjbsgbaebu (npm)

Source: amazon-inspector 22f479622a91db4c4c75e39ca5dbbe4f71dea422924c41b40f01c3f12e8e43fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inc-amaranth-swordfish (npm)

Source: amazon-inspector 2bcb835a4cdb793602bffc3af2a71d8f6b49043da39d129943486908c4ecf57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ilang-42 (npm)

Source: amazon-inspector 87e7a541d5a5aef2798e4b91a4bd2aa4092ebcc859a8f87d8728507235c1570b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in heath-tea-archive (npm)

Source: amazon-inspector dc733349ee1772674be3d7ae4411af4dc7cf40100b7a22d0c1f94c61db70fab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hanafi-ragi28-breki (npm)

Source: amazon-inspector 623c24bd8cee63cf363ed3587ac0c13ac950cc17d01d72a015c859c0f324ac7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in haba-tea (npm)

The package haba-tea was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in guras-nitroacer-tea (npm)

Source: amazon-inspector b54e17b454572b46c90a67c1e12690e9be3ed719447697b8d599d26305518b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grus-jwt-transform-ceres (npm)

Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in gociay-ung-fugugaicagiaga (npm)

Source: amazon-inspector 5557e429334ebffbd61a2f9be162cb4c79311caa44870f355fa7a42016a7d2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in gita-sasag74-breki (npm)

Source: amazon-inspector cf231819428a026a0d5ead2d570d4a34b5e04ca61cb3904805698ca366704602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...