MAL-2025-110015 Malicious code in unable_perch-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c752e5981cc6062cd2383a320083a8cb7e5492017daf3f85a66376a6a1b1dec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101300 Malicious code in delicate_kingfisher-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d7091171db92f31240fef8344a99438b7512cabc736607f819d1b289866e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100881 Malicious code in consistent_asp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108391 Malicious code in sariroti-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f7f6773e5abf739feac5c95ac6d59c0f7669d2a18ee093ed539ca28a42b394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106931 Malicious code in passing_sturgeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaed4886f0265b162c26d5783281bd2a7925441654c944292991ee87087de7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_dragonfly-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f320c394edd618b612390c46ab7caf43901e16fc07f46570a1a106833b271c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_primate-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9314c7f0f676fd8fc58acee63a38cd16826b0e9ef0631d0a6685a79e52b6707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_guppy-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2a5b0a8cd9f813087cd9e8031449aadef7179ddc1d28f6bcee1e8521b3bee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky_donkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e527af9369b8dab8ecf209b233439a605081976a23976f1953ef10ed31df2878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zcnjao-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ec221421c8cb942064bcf2c6d12e8f4622223ccf8878bc33f1b38bc04ea7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_gull-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309705c3834f12362fc45725831166f491fb350a9d1dd9a0b0b173c9b6e4d4c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81990ffe7223c1ccc9081f1adea01c913524fa162df5b63773c31c952e6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_cougar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27c99a4bca9ad8cab7bae1a0ce792184d40f23e2fdb4df0dba240d2e929df12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_mosquito-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4781bd90b55ddcccc71a4cfcb1f82f05df6b2b1a931a23dddb4adee17258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated_parrotfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbec436b375ac90bc41a917bd74ebbf27c02d28014ef4adfc5d88aa225115c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101156 Malicious code in curly_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a05c983ce48e6876b9f2414cd3b584d1748e9ea02e94e3f4ad76db144c01ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104356 Malicious code in internal_panda-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eee9415d26ec8d690acba76a5cefa005ecd5030cf7083053b1a3261edff1f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100142 Malicious code in btwrxd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b35697f22d7029058ab4422aeec9e5280e8e6a1eb8a7308fcea669d15b736e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101612 Malicious code in disappointed_frog-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b403eba2b6d3981831b418f2ec035508fbd24a8f9a96c5be0bb597dd299a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...