Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4612de8758ec3ebe1406e58b0be59fa8d0b451320aec435ceb911b1de4598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fanta-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38e72210ae92a8850bbc1847b2b6ebd71d42cdad960b846422bbdc8988fcc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_mole-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee90c93fecaf9149c674586284179db30aad119e4e8f6c5c328b98e665ab160d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing_nightingale-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d27c4441ffb3fb8fc76f37fd80dc9519a655381c2284dc58c747444bad21d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_camel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbf38b3260b7ce226e433a2c0ac5cd28947a18c483e4bc7604553915227fc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de25f04d64388f6ca33c3315899d11e808061c0aa8af4c9e89c6e9206770148b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilnelis-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69744561021b334cabbb33b8b3a3f90f101bca3289ec82685260b68111c6e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kvgnvn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36cdbeda0d18303fa7faa957e12b2621002d5d9abf7093d03701382d25c3041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_lynx-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753abcecd6349bdf18e49bedd6484d66005f1758372d15c30d40b654a9b4dee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c2fb39be609d7822a9af71dc3a52d2a23111be30ab2da8d0bac18f8776b441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_angelfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d82bb45e4e42bbce462a5acdba3e308403f7429f0e997e6c6adb37a2c37ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angry_seahorse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01c1fb016130875b92ff772501cf50cdefad13c224a009f5645a854c0767111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xskzwa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b760edfc3ffedb344cde8e305f57a9f3c2d84b0c080e9568c52379ceabd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100861 Malicious code in conservation_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158c92186865dadd98a6d892e676fcf28533b2d3168c9eb7e5adfa203ae1bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101331 Malicious code in delightful_sole-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9d21a7fb32fb6d3a198eabf4a2df2817b663452f3130981b8e941911c0891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_skink-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a336ccb3387bf0a93b67abc396cbfbbbae7b33c202d2b0e3db9a7298afe35438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_pigeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4055d931c477e9d80fcd3ce4c460ce34d0d9c1ebac5cf3ec660981be52c12a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uxjgea-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ec0a4e66bd98a7927eb98d97f4ce6fe31317157b9cf8945b6dbaad4f7e922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...