Malicious code in unchanged_herring_lavender-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82c7901f2ede1f8036fd33fea813cb9ec7abf0a4b790285d45efaa9f078bdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111960 Malicious code in grubby_ermine_white-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088e93156cdef879fc1e99d71dd4f0da07104d59512f47fe3ce97f5e74377220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112232 Malicious code in radical_flyingfish_sapphire-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62555a7e6e85bb064444ce00d81d189ff7d4a1d4e0cfd81b48d2d12d01b941f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112462 Malicious code in weak_crane_indigo-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25861601d928d60a31e2ad8f96c5e8573645689cbffae57736666d5443b455bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_meerkat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abb15454aa46416fee872303c6f3a4120561c0ebede87b5fa24fa5a27e35efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orildyn-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6990b6902fbfdcea9fa065f255fe5d265f25042d61bc17cc0079641527746f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly_whippet-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd90f250a331a33ba5dff7ecde2167dcb27a6b933ca8470c3548a7b4601e87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108677 Malicious code in silky_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564ce291389884b5eae3820e3e1d5f13e088c98e24e798510f513fa749621215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c06ca4002dd86b68f0694e13e6c4b2bc996daeae254c18aa91a06c0aae3f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107170 Malicious code in powerful_beetle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc90956f95995e1894847973ee34a6b4fcd367254aa1bd04baafb4c62630b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99180 Malicious code in adjacent_kite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbc3d8f7841f4e536efb5e9d6254a234cf1a9741a22b76436b96aea1915a5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104559 Malicious code in jittery_whale-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c505f0bfe391e83140d9b5fcd9aabaafb7920220472365d4daa54ad08bc5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101844 Malicious code in eager_possum-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f9c3e797d99844b6df0f8a1eee404c74c801c6532b09f556c8356a46151b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103925 Malicious code in ideal_wolverine-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2fab45ce587cefa8d6f65f177d8a6a92e18ba5316de1c5baa8c9a5f01a010e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108425 Malicious code in scientific_ant-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0f31e2ade15b6548e812982c7f7006abaf6c29902a1de403af727c4813371f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied_python-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8668ca3d2fdb8166a44f4c2c17764a82da35e21672d230be7e8dadac1f2877f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_pony-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e39871e80a9b83a80235bbd66ee8a0f33e56b9ce502b3dbabb3a6ce48bdb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_starfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12edb021f52150e831101fa7e4134370565b6fb46545405b5f48b9b01af8d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_albatross-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01c94dc9fe5da7c0b02edbb7cbcc18440da347b97831cf258dd4445f4bf0a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...