Malicious code in formal_flyingfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d84e4c56cb507ec4f9ea0aa5e4c15ae5a3bf9139c7e249d2105fa2a0397681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_giraffe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1813fc84342cf26f87bfa12b0f8e7b7b4d3e645784d75fa1b6b4befe9d0ac5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_chipmunk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ce33990b72d5eb35a1deb607a64ea6b9d6f96e644cb8ff186e5ce0b87dfde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left_skink-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0ff26704d677ee4c1b79838457e23e79c3a15c9d5fd3c0d451d6a50e8aa05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical_chickadee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d376dab43f66fe98e50f42e9b17cd82764202b7c85505ba0fa7326117adff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lmxqih-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bf63a6542938424c535cf424be087b8094c8c9f9dc92a98785a7b625a6e03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lsoiqi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d87798c0fbe9c3c624f08ef9dc030194626fce84315f2d84e82e4159aa9d5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_coyote-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a536c7e119d2dcd2d8cde57c38e3d17e5deb54fb112f07c7e12d897558a7c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_haddock-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16d9b835945db697af3115607441461accd8f6735080aef4d34432b592b7019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_frog-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3c4008de520ecf1f65f5b7884da548f80dec1738901edc2487ca5f22e51931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied_lark-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a7e07de0259f00597c82ae035d95fc40ded06b6dfc319404cacfec56648d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sempol-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814acb7a9f39c0d382d6b0a45eb732fb1d39fe4462cea87d7aeb1facc6e2d866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectacular_minnow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca4986e734285ad609758fb7e666067441675d01a0be0dbe2ba02c4a6df2167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1791680f88f943064d5f2e202640f60839fc901514632dce35eab3a828aa035e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_louse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018b02162abc350e1944bab750f3ebcaa061cfd630139fd1c243f8d75c96929d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_cicada-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd270ea11e83955bf025f797c807c93d0c1a1cb43d0cccb72667642590b6a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110047 Malicious code in unchanged_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b0a8c378d7a80e6a95bc3486c2447561207fefebc87475e6785d5a6d90dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106251 Malicious code in neighbouring_camel-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ebc5b61f7c8bcbc5014e3764971c615aef6c5d03a710c069e3d2c24ee958fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101220 Malicious code in dczddk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7155658f884b06b0e876498d7d8cc7b8317fbcbc0197ea476d1e46ade50458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...