Malicious code in systematic_pelican-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dad22e9e9af84ae0a0777e25c350a282e218af543c9cda4965e2793c82a4876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109362 Malicious code in surviving_magpie-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daa7b09183c68bf28459d38e8bc71c72facfc059e09c766d81b63b67819af1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110586 Malicious code in visual_roadrunner-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac36039bab10a20bfa6e8d497dbdb0d1be0120e7d8b61e4ffc9291b01f0d6e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99734 Malicious code in back_porpoise-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b891abb2a9779f1ab321b69d78db12e9f4b1279def734dde1a4301b05716eea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102257 Malicious code in ethical_mongoose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ff0c75d7b8cc86a6cd6673d4a5bfb3bce1f811a12ddbf90730a5915f9d8519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104240 Malicious code in inquisitive_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc656d32680c571742b3a9a5f41e76eb5539acadb6ef36e05018864b655972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01ecdb73dc88dbede398f6fcc1ead1d85c9c1f8f371cf5cb1f23eea68dcba36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_cat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99733 Malicious code in back_marmot-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fabab5c48da7d24a0fabeb7be55363146312b89a1727c96794e609d990daae01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajitas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb3592e8d5854e5b963dd9c93f628b230d9026420981918bf43d32a378391f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1b909c93d7a72de1b29d596d55808b17eb20f6d5a8fbbbe0a6a9e8d2de300d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_llama-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeccb3a3a049dd91e5b548558535ebab1dc2dd29793b4bc3c24e8367fee6a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108445 Malicious code in seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60022e68dc312105b3747b601935f8c03054e655aa953166b17522bd1807008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_dolphin_beige-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7ed5c3be1d9bbc312e33d3463909777f08e5be55a56a3d9b99f6206f5cdaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combined_possum_teal-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19aef31aa351f70a7fda7b95301858d46061be4f5515c37507a0a06c284d63bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104229 Malicious code in inner_rodent_plum-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d15e0579e954d0e2f387aa509d158429ddaa2f4e2df42aa5897cd3047a3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_mouse_aquamarine-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f34e1839de47ab896545531fa6820e8510d3fd04d005b3719a88b93ac79475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_bobcat_gold-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b51858fc9b4092af02f1f2d410a1861bb1aa394637561b6d72a0f4694e1886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07e8c6b0aea074a6fc830e8ba0832120aeffd79e429efd66acd3d861a242dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...