Malicious code in protective_wildebeest-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69174fd40484be15f4239524336c4fd855c5b112849a9eb972f9b704cd82dec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_fowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81eddff15adea2c046b421f08634e1c09e67dd09b3c63e725b1975d95d2b191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55863dfea90092a3b2fbd6f7ab75659c72f98da7d805d5c06a86045933532ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kspapd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbde9b363af18918ab6c3122fd4178daf06e9302a6ebb7c658cad0e214f50595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ae3bfb974e86953cc8fc7a335a3e75202d27bf2d1e61988022909888d227f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_dolphin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3841cf6475701654aa7b508fcb0918326d1406585a05e0c1789dc5c9dd8d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving_platypus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50e6b3e3c5b60f1f4f5f79e58186b04e68996220f3ceae04d4ba14539b51209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_crocodile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a916a88750412b67d0c291a46c1afe113e5a0dc6ab9c177fddf4f0648ad5f4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def6a5633a2c1d323838ceb1e9f7a2363631463c1eef040fdfa0e19aef094478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_reptile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e304b5895f3b3b7af1cce8d435cfa105b98666baf0f42fc42c1a3aa34c289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless_flamingo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1fece569c039165b8ea323f0e946ea9b077b7eb2111bf8d481488a3f0130ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109701 Malicious code in timnwd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6656a0cad632a3576ab4c56a14671f38e9243d157b6cdeb875de93a01b7f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111555 Malicious code in zippy_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260609d27cbbe4661b1266f150c7e13df9beeb9972c6e09fc1b5ba15b4ff4928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104744 Malicious code in jwuvzy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5012e25f3404a133074126802338680faabe84f3c765f2df9d1d08b537ddc7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102879 Malicious code in fortunate_cattle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e1b17f0089f09b2b0e23dd44e5c2103c52dbddc2d346186e9e3dc3da7194e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8e46c875ced78d5fd42388fe79d3d5c2dced0e7d0a8cea1ca25e01ced3a8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_marmot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a294c186389c5eeb30a1e78e18e102d5db861fb247e29a75947d6802398184d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b24602d97058514144f5e583fd3d127cc8c1f5308b2d8b36f9295b905867804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...