Malicious code in gradual_giraffe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1813fc84342cf26f87bfa12b0f8e7b7b4d3e645784d75fa1b6b4befe9d0ac5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107784 Malicious code in reasonable_turkey-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a49fc4898f7007200421e96c5efc4734f31e53e971a5bad2a387e39097cff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108618 Malicious code in sharp_warbler-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0bb2431c582b61a8dbd7a7a78d40fa7c2ea947fb4dc48802f2ad45429058f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105776 Malicious code in melodic_hummingbird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d92ea4cedf0df1638947550f4ea07d803b042ee9734223fb9cdb719248172cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_flyingfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d84e4c56cb507ec4f9ea0aa5e4c15ae5a3bf9139c7e249d2105fa2a0397681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1791680f88f943064d5f2e202640f60839fc901514632dce35eab3a828aa035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105812 Malicious code in metropolitan_mosquito-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1283cdbd7d2a7481c97f224736bf7f76fc632c812299a72aa7f0a491c4a39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ce33990b72d5eb35a1deb607a64ea6b9d6f96e644cb8ff186e5ce0b87dfde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110047 Malicious code in unchanged_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b0a8c378d7a80e6a95bc3486c2447561207fefebc87475e6785d5a6d90dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108453 Malicious code in seblakkuah16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e7dcab8be3cbf1e62de947355ecf7542f8a51669845cfcd024a59cec44d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104350 Malicious code in internal_beetle-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111132 Malicious code in xpfymn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbba969ad9e7442c01602ec009fde9fc34a8bfb71a52a0fa189d8ff222e6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a7e07de0259f00597c82ae035d95fc40ded06b6dfc319404cacfec56648d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_coyote-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a536c7e119d2dcd2d8cde57c38e3d17e5deb54fb112f07c7e12d897558a7c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lmxqih-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bf63a6542938424c535cf424be087b8094c8c9f9dc92a98785a7b625a6e03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106251 Malicious code in neighbouring_camel-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ebc5b61f7c8bcbc5014e3764971c615aef6c5d03a710c069e3d2c24ee958fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3e4d67427743efb72b5ff7cbbd4a2b4fc026bb30b795f9c7d56cee109a473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100322 Malicious code in changing_gerbil-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d1412180a6f0ab7d189ec04d5360f41620d1c0251896f2d1a1f4e0232aa50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...