Malicious code in modest_toad-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e77864798b0be7cbdb663c89c11eacd5195fd481a2a364ba57dcc9928d994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_caterpillar-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef03ca11d7e5cc4493e071112bdab557bc3899273e50f2c2cdc58ec3b26ec3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b0a8c378d7a80e6a95bc3486c2447561207fefebc87475e6785d5a6d90dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101685 Malicious code in divine_wildcat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b895e58fc060617a939f55136614d8d71e10d84c0205b2868c0fb7493acae14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tvywfe-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce351a288cb856e46d8a49f16f4f4a094d4a8043af7e16f1f7313ba116a782b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_boar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb9f3a419171d5bcc2d57107751b6295ed2bdbb486d9bd1f1d610922de9ae87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lbwvbl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e9162f560161d54f81c32e9fce47824da30b0321cf49070fdc11ccf12a4520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_frog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 178b28e7bd3a5d30f79ad758a41e4858d078d0fbca33492dcb08f08dfc0a7cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110992 Malicious code in working_cheetah-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664f115a7ef9e4b283c26caceb1cc6f520db3d11d8983ff62b26e7a206405dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel_tarantula-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54841da5370b8ab2c008d989f7edf32f82d82babe717bf40f595e7f434edcfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_mink-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff7df3d5c1e7fce3cf87346ed8ebd14abf345dd998e2750cc7085a6dd97c6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_earwig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29c4c4e658085952e5148310bc9175e2ddca5b5a84d82e1c06d63b2bf8c9ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless_squirrel-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b912f50ab34099f95462ee84b3695be5dc18aae25f6276e94d80b2650eb9facc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_snail-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d8a399f1bcfb7d895b03f1e6058622854c9001db18b5c68ef435959d83289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105908 Malicious code in mjiqrr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be478c0af81568eb07027dd30a2599c6c23267e4c50e18776d8b8268c90547e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111297 Malicious code in yielding_iguana-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ed02e0fd53e2f886b942d3458ac4c489d0df4f0cc7150012fb7be00e39db05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107881 Malicious code in remaining_parrotfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b913b3a3307dc3e9d022dbcecd34b5f4883bb6ea0ef29c3090666a7fccafc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb59ea874ae309852913251e4bf043ec8813ab23163cd9683388ee8de7dc2539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103352 Malicious code in grateful_earwig-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59acbf13d5d22d3a7c925eedc4c6aaf0c79816c23ba4ee89220785a72934e628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_worm_green-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd15ab09f5e659c1c40ac16cfa571ef5cb67f95b2a0fc9493153e8b4f0daded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...