Malicious code in key_mastodon-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23766432618c03d96f4e0617741cd78ac7b03e2b8bc4907f802f432ca784381d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygotic_crawdad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8b25647c1c2209080ecfcdff7df06d1c5748f16b7d0208844dc453e37d21eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carsfrot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69dbcc25e94793736b4d945872b6bd7f8c3e0a6fc44077b0bdff9bd9e185391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_crab-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a83d6fd058be7a831335c9a98b6a48bb46d0d444725dc25b93c426998d39cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574904246aff8db3b7e83fea561034122eef1f8755d39ea94b230e52e8748390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in realistic_emu-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9598f6a80648532280d8661db2a7f3e963d405e8ef1f177b2f0ff9db12fa711e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagre-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d657b5080c7c1694415647f79c37b568541f17c622c6a2bfd5c6085d10b66625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_albatross-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01c94dc9fe5da7c0b02edbb7cbcc18440da347b97831cf258dd4445f4bf0a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparable_worm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a299adf417b6672b6cbe894a1c36492c9f9cc7056338f316e761aae8f900597e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_aphid-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c16d5f957b144873b96089ccecb0eb20c9a5fa33c348e6825e5d7fcf10493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_anteater-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06edbe9b7e93a98308e80f648b201ee2c2b0a8aefaf044137f58a3807eac560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zzjdpe-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb93e0336a71d91e750992505fd369e4238f69d1b99b80b02706cddca0e44bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in revolutionary_starfish-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e980a83d58f651ed6ae0c0cff38feb41ac4b5c7ddb2469eb3316b4b5c2c401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_stingray-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46da2a6632651649e10b96f0d671eb021fa1b2883ae589cbb96052f8c1b730e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94f7dcc8b02380301eae39683becf9c22355e1ece4880b35d87304a9de999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_muskox-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e244ca0f2afef9e53c62e62165df3b9c142bfe670279ad4d401c3c772412a6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b85d4adfa4bec9ceae7a72a3a6f512d035dbe6723e147b142d142b6f2f864d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102413 Malicious code in extended_roundworm-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6f114efdd2ae4b95bf801dd548da15713dc6aeff639ce312d883259b0576ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102364 Malicious code in expected_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa223c5916c8cb38e5291fef00293b0e647344aeb6813fbfd4e9914e6b7e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...