Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent_asp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7286128bdf0c086bf7d854c6bd090be0a29622d2954ae2c10c511079bee32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110777 Malicious code in weary_lizard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc03fa742f8a9d9bce88dfb9164daea6e02bf087260d6538f11ac3d7037a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99492 Malicious code in anxious_eagle-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9672b0f74585ab4694b60279481f3d8323cf680ec904e5a1f559d9b7cbff951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661c7dcf079aa8e3444425a256f53ef2e7afffc2ee7ab3739a7363fbcbcf3320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_vicuna-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b060992dbd4caa9f855cd103274521b6588334e6a0432175dc53aa7885422cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goulash-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb55bacf9651aaa272180515dfedc1cbf336d7adeeaab3308256728fdcae106d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106499 Malicious code in obvious_swallow-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b514b2ff6836a047b725da77a865550b194814ce522eeb514dd9bb3793e2a160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108160 Malicious code in riswold-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddc0e3e0cbcc9184588ea8974f733faaee20ab4813ce3dce7f0aadb882983e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_scallop-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1690c74103c8e8ecc73348ee3523365d1ed3cc930d2dcd4d217351ea23e905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_camel-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ebc5b61f7c8bcbc5014e3764971c615aef6c5d03a710c069e3d2c24ee958fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful_crayfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8b6e4c6c213493d8917ef587da991fd16a051ce4d8ee6dd2af1ed3d9e26092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_koi-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf3d29fdf11b920430d50fcbada22f3a6651e3104e203d0003c3cdee8ab1d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prime_cuckoo-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06623d98f800abb7a70b175e619814764b2bd242d10b6866a8eddc553bb656ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cucumber-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9469ff490246fcdaa28a7eb4f8897e226d47ff6afac1230a30c84c6d56fbf4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_aphid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08cccb2adbb58c79246294d772429fc120635b6c8543047d4eeb6fbd96ea700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b85d4adfa4bec9ceae7a72a3a6f512d035dbe6723e147b142d142b6f2f864d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_camel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbf38b3260b7ce226e433a2c0ac5cd28947a18c483e4bc7604553915227fc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_felidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd4a2ba0e12efd96824829735cd7b22c6020d6d01623c8254ef917d03e2f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...