Malicious code in independent_junglefowl-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae313627eeae227f106461fed09e98aa830a42c0237df2febd1cca8186da64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_dormouse-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4251952a49b2cae3af1d10b442e768989294db346164a5d3d90355199ee08f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in khmfpi-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957501cd44c1e9cdaebc3c8428d0527baebad1977c605e2c3adca064aac9751b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased_partridge-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a568150fad5b4cf43541c05a2dc2f5c0dd4923ad409fd13881382a4db39bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5feb7d0f639348b19e402d473f79876f9187bb43abe5bc44dc3ebd5523ae89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109947 Malicious code in ugfcox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3674c668d9ca8237d18b33e7ec8c3baa3443e24d21907845d2e5ae9919c86c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated_penguin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3099232508f436eee9049a17467d4d2116c6992e98e6ba8f1acd66cc6acc2c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_dragonfly-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01755fee062f21f75e56b8afb725a33e5484091eb2fcf1c82318ccc40379e17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pierogi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97585b8dddecd94a7acad910994528de5eb462e213726d68e1a311255cff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_wolverine-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58047b211cd2e7a3817f28e57e2baaac0088116cf3dfcfe76c1bd5bb18e86ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc30fc21d87914c05357700f3fd10dfbd66da22cee58035a249f5e53a8e439b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nzvncj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569099561ee9c5493f69f4cd0defbb402ad2269bb0924fe593714b3d3066f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental_hawk-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdec65970d07ba099171b80253bf410a2f0b5f706a25fe8daca108f3ee0f41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_antlion-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854c66d044a085214650d5016e27fb8f8fcb5f278faef65102653695f0ef9e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pgaool-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ffe74b96d7a953a11c9c62b0d308901f3dadcb95db427f9c068101abfbc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_bird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce16ff95e3fcf7093434f6e09f7a582534d55a0840e6c3ea00d19898464ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_mite-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41b04d171e1a56be76b650b826a2d259c9cf3d2411fd6253af9ed50b3fb8a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_canidae-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61323d59292daf6eb59c259f147da3b440a04d3866cf5f10959106224b9ec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...