Malicious code in harsh_cardinal-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f82e73cbe4d6ed4d70fcf00ff387492572e8f91970c18dbb5d60dd41f737f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thaeros-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8799a6fce586cb318c3bbba9fa553d2d7f82b4a54b74052d33d0be083331ad94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9768bce12c6db02eb4c67542411b3116f45d9495c529a4a44bafcaeef98ce948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4137d27a492127c60b130fb674bf307e99f8ca994bb49bf5521b422a5e33cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_pike-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c5803ed64f2c9e6a484f8c4a026d7f4c1ce0cec8cb26711afde49c19541bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_silverfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66345e7f35162cb5e3442aa40a94dad5535e6a1012ad4f40d01bc4e8decf409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_hedgehog-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e25d5250f70b5778474bb68fd2fa93ddda3b88eb0c2e1d28d530d1a8360b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kvgnvn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36cdbeda0d18303fa7faa957e12b2621002d5d9abf7093d03701382d25c3041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_guppy-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8561cb3f2cc04bb28bdd12af89fb87df2429ae9eb716c4743a2475685ed5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_skink-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a336ccb3387bf0a93b67abc396cbfbbbae7b33c202d2b0e3db9a7298afe35438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_pigeon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4055d931c477e9d80fcd3ce4c460ce34d0d9c1ebac5cf3ec660981be52c12a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_elk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a3befefa5928b554aab5d455759102de0bc7bfd05e7b1b5e3b01d1223fca59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def6a5633a2c1d323838ceb1e9f7a2363631463c1eef040fdfa0e19aef094478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xskzwa-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b760edfc3ffedb344cde8e305f57a9f3c2d84b0c080e9568c52379ceabd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in razzpj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcdbcb3b0ef5dd617104529281a275ff9014519508a3bf467d95bed34cb803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hnvbvz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ec5a62328465134436b6185993cc8312f807b31e246e9662c2a783c50cc1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_magpie-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daa7b09183c68bf28459d38e8bc71c72facfc059e09c766d81b63b67819af1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_spider-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aee542d232e9f5c9d2beb292c437f0a5f7f511e31a2d94a2f00fdecedb101d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100861 Malicious code in conservation_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158c92186865dadd98a6d892e676fcf28533b2d3168c9eb7e5adfa203ae1bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...