Malicious code in wasteful_sparrow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff70a908a569cf7421f04e615098827279c8631d80bab9a60b56de5e6fc3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112177 Malicious code in past_guineafowl_fuchsia-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3a0ebd1bf11d29c6a38b9a837db2d9fdf3c7e2734bfa37dbe4dab3a7be3c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112479 Malicious code in xenial_worm_amethyst-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d814620e8ea30b37d6059bd57d57357234f0c1640f7c82340a6b00c1ee31652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112128 Malicious code in neutral_hoverfly_maroon-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ffea684561b1537a15ce73edf95474868d8abc4c5439460f0f7988d18b8978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111877 Malicious code in exciting_reindeer_maroon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20ba6a0945c706c17c8f760319cf405594d940c6375b9bf33b7a162c55747b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111665 Malicious code in apparent_owl_green-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940046ad11f82db072ee663d355feb9a47eb7ad25fcadcb2bbb53c1cab882d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gcrcsr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ea6a7f29b8bb81ab73a8728c4864bd0570ec35f18bfbe6ca28e3f211ce5e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning_boar-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0188f6151c52a9e60f94d0df26747061be5ef8ee2f6943a72640900bba63d5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed9be82ddd5f9595d8516a288947880651280e92ba91d9f86eb97b6e853229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690ed3edda95383cb2d8e8880b5d9c211e60b50d09d00af5c8560aea683c25d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart_ptarmigan-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa74a721937444fa96931c1ef7114c6cecee3a61b2e48c5e7232a0a54e323b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_ptarmigan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db4c242dce43a0a4961e04f3ca5588e654da81b886528eba38d8718ffb89b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling_wildcat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf792641b41b15e39694c6512650f8f1cdeb9c53deda9947f39618a0bb76a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious_mosquito-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caec341bdc23893d0145fd171576e280dd83b6bfc5c9743b5e9d90f30f69eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ccsyqj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95dfd9e11781b04cdf7ff9c8704bd6cf25a73630569a0f3435b55bcd3d08a806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_kiwi-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e623f105d13975749cc2c586eb88131144874d4ddb3d7d2c8292b65a8651cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fdhsdg-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1072725c52555a9814c20b62a4729fdc4ec9bb1b877d0c7569e8100ecd6b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_aardvark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1518607fab29be8f06e4fbca8304dd31361528975bd2ab54c9c407c68bb03c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_bedbug-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae1852e0fc7e01beef5981371bbe49a9b3faeb728673efa84319035d856a4314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107094 Malicious code in plain_toad-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9251dba1cab06ea469ce928658816a41f2405a18b15f8368de958a8d081d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...