Malicious code in financial_halibut_lavender-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85aef40b3af5c819396cf237af6a7f16701e477a8b70bb2a10c215dcc60f6668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112451 Malicious code in vital_caribou_peach-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285c8e7d26954f805c8ccebc538afac89b2dd13a910de962dfc635ee3463836d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112336 Malicious code in soviet_muskox_orange-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455af39d3405ba3607dd0dfe05da53802507306fa7bae4c2cc5dc3f615d727d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112397 Malicious code in thoughtless_flamingo_amethyst-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcc404a86eb59bd5fd235ecc50284cafdccf103cb4c9e78a9157d09a348674f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112379 Malicious code in systematic_felidae_tan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c98ecdb61ceabed50704945491a421a03432a4ac63caf8b915fc687ed5e6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_manatee-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc04f9ccd4576191305de2951807d681ca2bdefeac2722dc1f396ce365588c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_earwig-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861ebdea89bcbfcd1b30ed7e6d17b0cd253a98c15cb3f74222fb294a4fcc294c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_rhinoceros-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352d0085d22631a4177747be064a5da0884187d0a7fc4c94c7b8b5bbff0f14c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af810eefbb0da231f162e0b37393fefe729b97a20734c2d4a0008464786c0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qxaceg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4894fe493b75e9308f8983a35fc5b4f7560e0008217a5ed2399166559bec5ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104341 Malicious code in interior_peafowl-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb1006f0c7f3519d942b1e756d5a21ac892bba78e968ecd3a4e0f49d22c6105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105788 Malicious code in melted_rook-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf6c7627a1ec20e21d610d0de36a712b9c8ffbf995fe155689669a40e0ee27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106813 Malicious code in orthodox_vulture-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ee32148677e149d02ef5ff5f2fa63b5529a30a9e711b34a25c2af358b1fc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105451 Malicious code in magnetic_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2f22e8e6b7f218f3ca0a32e5f7bfabc9c92df486ff2723d7384b1ceb901fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101855 Malicious code in early_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8946da88ded8b0ef64b544c2ab153bb2d2792f1307c292e138f7465c6e71bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_kite-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a47545f25e90c7c5e8f4484647c5810ff8581e3fe7f17dcdd1b9a3781757cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100787 Malicious code in complicated_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1eeaa5315552c9d51ae052520f0543e9dffd5a176ff38431775fba5ddb0072a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106506 Malicious code in occupational_grasshopper-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8aa1f05c0975298920d2fe4cd6a95ee7cee904835749e6d30a9de1539aecaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110212 Malicious code in upset_bobcat-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34972ab5b5e2b106ac4a9ade92a447aafbd2a6467b9b357ed7a7c8686d3489b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106854 Malicious code in ouufsy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8589fe09810bf3f118df7bb26bbfd09b8bccdca404fe71b27c8047c0487ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...