Malicious code in potential_damselfly-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de4fbe6ba245d6ba9acae044eef9e9d60f1dbb8c47212b835aa2aac9d7fb4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_tick-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a78cddaf9a193d4581d8ae4f94ab148563c482e6d9f247a7c0143cd41b3647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_sailfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac91209ab385a0a436e5a849fe1054b5a3923cbb76d2304fcc94d5b748b3089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67de227cbb307da471270136a5ef39b99b6985ed3a0eaf608bea2d28e4b432ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bb8ebd415f6d7f3857d8d9f93d2b48588593c753f986b4ac2ec4647bb1ef6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swjgkw-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f13cd5902882c4e809fde8aea59d5792192a48bfe9e3e3ff2974c4a1bd8b9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_pike-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e954f9f8792bc0af4bd27788936ef82f021c9a01b2250580f471e49ee6cdfe74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_emu-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a79265c672854e9811f41d2eaf30e66dc8247292a90b2f4440d9d3af00804fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_leech-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a9eebb94601c57a97564f808bee3edb612dab9216d66567853199ce6cc832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_dingo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f470cf421c877123d73c715e0ab3830c3dea923f4daf98dee6304582808360bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kebab-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b440874f0f146045a60ca78a29aa43fc0abfb7e245f0d113151d303670d4c112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_marten-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15232f1260c1322ad2079f23f623d6ea45191d2d1347ea1c4388d46d3aca96df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_rat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38edc6b10f87acc32969db2cf30b98b785b2ed51275880af7ac54a33f8d6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_scallop-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb5aae9ca7fe5eb5dc5bf326db8dad6112d07c07ae9513453bbfd6c6aba70fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_minnow-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c61c88f6c64b2f635b4d33b4a5c401afd46069925ded76eb6964d3b477c728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keouzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887479560e6d4227fec23022a98a6cacff6f5486c88b94e040bc1d489cc5be9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a663d289859382765433d73924d320426c1504607159cd851e275687dbd667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107194 Malicious code in preferred_finch-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78162553b959eaa4b4cfa8eddb48888e723c1421ad3c545404d5a57076c19595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101250 Malicious code in decisive_meadowlark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d93d8c6b407ee52bb1d8e65f61755b001e6f12febfa6da650383798d67f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104277 Malicious code in integral_leech-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afef20abd0daae99c81130d04bb3ea23b68d0f186b2c34831571b3db3d9467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...