Malicious code in cold_fish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34004d00d052cd1b2bea79a68671d1c658075b69c7cf57e901b10704f594c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50deec65400c81ba13dcbf408b5641291f7b318dd5421e758c65b428bf4cdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107404 Malicious code in psychiatric_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b49fa6893ec55dce7cd936d224cf65d5c01df3870bb5563ef068c5a6dc6b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102026 Malicious code in electrical_haddock-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84223d34bd695e5cadebff44dff68d145356df1eb4e36ed0ecf9b714d1a51aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_tern-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b8d6168a983931ee43fe79c25d6a86f431f99732430dbfa0e80474a63250c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4326c51590a3fd5bfccd2ee50415375553323bc4c339ab0080a82770dc8b0869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15232f1260c1322ad2079f23f623d6ea45191d2d1347ea1c4388d46d3aca96df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_bison-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_leech-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a9eebb94601c57a97564f808bee3edb612dab9216d66567853199ce6cc832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keouzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887479560e6d4227fec23022a98a6cacff6f5486c88b94e040bc1d489cc5be9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_monkey-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea5af2aac50f91fe8f0c4b3c591a42626927b09e1c8ccd5b8a13a089442224a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ccae29e0cfe261cce37ce12e528704c3109dc7fbdad2355f35cd3f42b0648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing_barracuda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142504d60c752a0ed85bd9b58e05e74a2b450d1b6d6d3334b51dd1dfdde0fac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_badger-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a8a5cb64325d991b64bca58f60be6859b1a1bd0021c97d9806d690067ff692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trout-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e3abde3841ca1f5d9b558eedf718fb5c56ddb3aba000834ba5193788d93c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @seblakkuah/seblakkuah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdfabb3c1d4717847f86c68b52028648f5c29f6c74b915ed3eb7fc9bae441d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful_spoonbill-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f077a1677e9eb34062d00612d6de840de84e135d6bfb226a32a65bb8e6e30e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marginal_impala-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1ede95c1e6dc1a3bf63a25a720a5cad5bba329f54c3dd30e16930b505b4b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swjgkw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f13cd5902882c4e809fde8aea59d5792192a48bfe9e3e3ff2974c4a1bd8b9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous_partridge-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795483c51da52200729b5b56c53c6553c78a396b566b89379bea633267be15e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...