Malicious code in compact_toucan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12a2651ec647c3f27075d15794fbdca18aa23ea1cf40c34dc9f2ba008498eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in related_dormouse-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be2ff63357bce1d77577ca538b99e651b47e3ea33adbb1b10528f3f9f0f80e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_lynx-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5926396abf3b687144e257c92170080e8003c83aaaece2f4ba9169000e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vrvhxk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2b35c698b9013f76df38ef4a1c5b54c7c6793fdd0b10c1bbf4fc503c907573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_hummingbird-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613bdf8dd4831c9f4dd47476d71fbb307e57fbe083dffaa8ccb6bd57fdb53b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_marmot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a16e7e13eb669005160c8a8aea47689ad11e88baf7eb859220e132ebc6d1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_gayal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308206b02604ad9105c180e88e091e8b1d97349e3dd59ba570595ff6e28a095c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in garduribut-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b0a981bb78a524be59b584de7f91581def42b0855b2a33591a5514d63de15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_tiglon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebcdd1f18aa3192405213093c846a717175173d90c21597d83f6c9bf5474f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_lynx-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb9172bcb35f9d3fffaafc0b299f6f924469aeafb0c84084c6da13e227fa4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_porpoise-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d863cfaebf6c845932763ba2d1d77df7db0a0b203cad1de277858409b1d57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_swordfish-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf3fb97d32d945c6491b7681dcde1895ab293af81f1d5307b4aa1ca3f2883cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard_raccoon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7c802fb7de5e6ed0bf4886759f2d01f53bd8c4842aac5dfd825ec088f842a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_bison-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_panda-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81990ffe7223c1ccc9081f1adea01c913524fa162df5b63773c31c952e6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_carp-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840e715cbf947177b0d9ac2758bbd88d8aac38d0595edd46fc748e443f86cc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_parakeet-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00966432d79d8d3224146fb2a2524e5457949626c5049edbbb5defe58b9def40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_giraffe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1813fc84342cf26f87bfa12b0f8e7b7b4d3e645784d75fa1b6b4befe9d0ac5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105142 Malicious code in likely_falcon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e7f7075424fc959f396c0946dfec1cf2b9b0b234afc1cbac8a66eebd1802a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110457 Malicious code in vicarious_landfowl-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2c859a4971e7c84f29e2f5facda5ded5c6dc61bd9b98f7e0e0cd8792d10402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...