Malicious code in elegant_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e35cd00f9551adfafb7a9fa29a88d5a4bfdfe24df77636e0c9775de01c605f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_damselfly-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de4fbe6ba245d6ba9acae044eef9e9d60f1dbb8c47212b835aa2aac9d7fb4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58712810be44df59766c9baaaae7c755d7945337f078bbb585ff020449116f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless_parrotfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdbc8c44a6ea1372dbbe106ab443345f40841193a1bc6c9d28a46bbbdb7930f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_cattle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ef8c90f31ada47c69eb2d431fd910f4b9792ee0a40759525b665e83d372a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kebab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b440874f0f146045a60ca78a29aa43fc0abfb7e245f0d113151d303670d4c112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_possum-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef7b1af2b5b189e8f2f234b942b69fd165a71cb1b4bf8bcd44186779b4a0829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hqmlfg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d19e72ad0755365a14ac1e43ccf34b2ba920557fea893f15ef52190183ceb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xhhwtm-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a8a9af606fb73d0c5cee40b2a28b2848590a96094e0d1716755f2454e9765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely_wolverine-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cca6992074c307da0c018b9d6cfcb2198d0a942f03ec4679b429c98e5dd793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_jackal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc66da08afd9f0578aebccad35605278cddf7ab9de43f6526c08a79979b52129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_perch-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97267d0162b4f9f29069fbce2e1f2b8434293f67d267a1766ba8b8399e2ad037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_raccoon-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d75f2fb600c3bddd35ac80589613b9d4e5a1b90613a82c8d646aa90d2b2df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_wombat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ed0bc061901586c4d4d60e1ee6cfffbef4ab02e8edd0114f461b656ecfb6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2fbd920d25e78c569ab5bb5bfa41a7c161829bbc20f630b75d9f1fe4b74d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_sparrow-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cc7c45ba79d93096823b88d7f6966f3fae120e5b27e9f9a8f81a7940c6a83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_raccoon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a058d777582b13b881ba94c5b5d65b0b1e890875b810c8066be3209db03e1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_armadillo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4838da5ba768ebb4a315ff2487e9945d4e167d6ee7dc902881b97b74763e721b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106500 Malicious code in obvious_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08505bd80ba96bea4a0205344f2066291fc4cb13f261b97089abf3d7abdbdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108574 Malicious code in severe_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8123feb8649e054a29661ce91e8df4f93a963fdd8df04e64f45a31e8c7bf8ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...