Malicious code in intellectual_guan_harlequin-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d894a2652def21c774ecc37f6e5d26727257402bc87d2da3f9edcc16c45e796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_cardinal_black-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d44d6f136bd81bfd6dfae53619270e194ac22b0260572df9a957ac768974c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_chickadee_fuchsia-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5581eecab474db1dc14bb275adae5ec01a9dc0af86d6a4bb0e3961ae2d9591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111853 Malicious code in emotional_meerkat_salmon-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33617a617b90fbd569567a5c16aaf0963b39e8ed23b5621c30dff578420d0e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111776 Malicious code in cultural_cattle_purple-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b171418a2b4b68948375d3501a72438991993d3ecf6e87bf80a980127f37ebeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111790 Malicious code in decisive_tarantula_scarlet-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb969dffcb63e78d4d8413e9f5b0c7bd57cc76305026188a2258acf330ce88af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112267 Malicious code in rolling_dormouse_orange-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b15175f74743756932e00ff54be80491d8e01b87dcd2f9070bf8ec3de98d9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_hyena-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfda6716a0350135771e3c31b2ed8c3a8f33534858aa034a491960d40c1616e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yfhflc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e8f79b03c2188b26a1c1cedfc9fd94c6d9046d157b15e30bddde99915d134f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_catfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c5dfbe92be531aa9e8eaaf1e4b39f15a579a4b7418ca318968e2ccc6e74c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_marlin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b239c0fcc548b9095ef74c6ae051462c9c045c419e3e8f4dd4e3a58868d02cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wzkbyd-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3edfe1862b623962e1753b2a82dd75182c5fe7fab54ce47bc79ae367ae7285b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_firefly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63fa2c37d824cf4e0e5095c6c3b4994c34ebd747e76481155591ad4b74250017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor_puffin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81118d8490cdeca188db51f9af791ff5a9f39e33e235a2e6aaa57da771acc984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_gecko-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3059a1156999ffef056f2705073b421acd86a84f29c85dd1ce142fac2a20f78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99749 Malicious code in bairalei-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4229ae4c697b82d08e0427676941931773e5e0eeadf9d2d5093286511210133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102679 Malicious code in feminist_stork-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eba1cf246b221d69c6597e7e90afb5690b0f4722b51f55988a6392608c67db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cf403f4bed14298b62139c1c561d8c72dfdb727f142abf9b49471d1b55af26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_worm-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1377b9c2c58d800c2f9562461e7adb356e0c1b93a1774fa1e4ff1167ab54ecdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rrubhk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca3f2df7bcbd982306598a5834256a81b235210d3eb861943e58c792c64b870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...