Malicious code in thalheira-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397a9877787edfc7b4284845fcb115195be1704b953692a77e160291077247e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rolling_boar-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7c5fc6154db0a885a09efb10b0740b9184c41b26adc4fcbcaac436cf641c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_crane-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d925934a165f69e2d8bfc990dc54974d1ac6784fabf5ff8454d08df17cf5527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109023 Malicious code in splendid_wildebeest-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8779d3072ff87263c7668cb4f101845d809615c1fe38cf3da88c39f9e6dcc093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_anteater-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06edbe9b7e93a98308e80f648b201ee2c2b0a8aefaf044137f58a3807eac560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107660 Malicious code in quiet_gibbon-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063b6ee1e609942b1c6f980503a4beeebc15fa78719026c8f099112fc2e18653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574904246aff8db3b7e83fea561034122eef1f8755d39ea94b230e52e8748390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107290 Malicious code in prior_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bec7b3d63058dc8ea1273b6b0798a203a4c7d92c0ea8df2d8d6751503942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_beaver-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5eda8d27624cb06b61b4cc6f276042a8523ca47146642941e9f5ca204624bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luccy-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e361e51f1a0cf64c7b5cd0c40449bd026c6e747bd298f00948b46afaf99b3de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99636 Malicious code in asleep_reptile-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aeecd2f700a598d9c731bf3148782479d8f713495ff50fdd62c7854d3b6aa6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_lobster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e797a6935545b5d202dadf93ea13aa179b25e8ce85310189de25e5cea1a216df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygotic_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8b25647c1c2209080ecfcdff7df06d1c5748f16b7d0208844dc453e37d21eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mzjbwp-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a6d627a5bafc0d4b699167b43fdba134a17920964bdfbc683f11c1525cbee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102146 Malicious code in environmental_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f925795c1392c280541b2428b14c3499279ba366fb2d7ba8e8f0c7188b00b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular_armadillo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e28eec45fbe311c306105a4c3b738b058b6919461818678b1f44ba7973589b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_albatross-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01c94dc9fe5da7c0b02edbb7cbcc18440da347b97831cf258dd4445f4bf0a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slippery_alligator-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007414844c7eef88c92047ff126c3958d35dc43838add3bada994da106c665b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wowwgt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffbc235336eb834b7e210710b2e09f2a7873a74c39ea57f33cc16222ea77509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103306 Malicious code in gorgeous_beaver-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c8182fa8d975a1c38ad97aace48b63fec77a52b17f69efb076f4177e49b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...