Malicious code in holy_locust-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dca5d77913a897711447f86db88fb183dc03b4485736d52557a22dc4ab5ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless_flamingo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1fece569c039165b8ea323f0e946ea9b077b7eb2111bf8d481488a3f0130ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_xerinae-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e8a3b674bb0b316c06d56f9e7aa9efac15f38ef3539a29a56950b7834ddecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_tarantula-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55863dfea90092a3b2fbd6f7ab75659c72f98da7d805d5c06a86045933532ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kspapd-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbde9b363af18918ab6c3122fd4178daf06e9302a6ebb7c658cad0e214f50595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ae3bfb974e86953cc8fc7a335a3e75202d27bf2d1e61988022909888d227f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwuvzy-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5012e25f3404a133074126802338680faabe84f3c765f2df9d1d08b537ddc7fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_dolphin-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3841cf6475701654aa7b508fcb0918326d1406585a05e0c1789dc5c9dd8d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda94cc8717a6a5b9007520e0328f2d2ca52603afc16b1a0c587ad91fceb2c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8e46c875ced78d5fd42388fe79d3d5c2dced0e7d0a8cea1ca25e01ced3a8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99343 Malicious code in alert_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3b61dcbef9a67749e2788464d73e9120c2b2a0475c3c2192a2d878eacdce24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_fowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81eddff15adea2c046b421f08634e1c09e67dd09b3c63e725b1975d95d2b191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106856 Malicious code in ouyrjh-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6c5d5ff7fb8c384df3dc217b566e50885f006c4c363ad8296d207839896cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109160 Malicious code in stormy_wombat-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236808146fd31fd47197a61fa557dc4a772ccb7081673da28a4f7df334a11299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109612 Malicious code in thirsty_cockroach-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34099b0023fb325cfd56929c830cdb66fbe4980005885019710169022102813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106887 Malicious code in pale_wolverine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04314ffe6c86e568cf3a56b169eca545e6a20c77570d54bc34a1b457a74de436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108459 Malicious code in seblakkuah22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b078fd775989182945efd7ed1d1ad450ba0d26fa45818d7b6380f704ca6b56e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111555 Malicious code in zippy_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260609d27cbbe4661b1266f150c7e13df9beeb9972c6e09fc1b5ba15b4ff4928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_crocodile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a916a88750412b67d0c291a46c1afe113e5a0dc6ab9c177fddf4f0648ad5f4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d71a6227d813543877f86e6253c8316a6c89a1c78f019e4aa82d3d6bb60dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...