Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-phoebe-meissa-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfc3ea1ff019850090bbd63cd756abc2536600f47a0f4c7286e87765eeb204e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-puppeteer-dactyl-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5573cde9eb7f58c50db9c8a3d2f003010d9e86a0331f9e8cc3f75dd851d1b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-lynx-triton-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad36a83db4c18f6d235decadf06c6c601b0f3aa88ea21b13a2cc6f1809ea172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-leda-algol-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fbc3669df0d35be47cbe0140850a63481a6f1f7446b8c464a7b5b0cad5508b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-quantum-delphinus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e68fc559ed11c01b8503c338131487afe6830e3c1af8279dee6f84371826125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-cosmos-arcturus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35bcc97047b629dfb67e111296a3dd5abb69a9c51e03a51548ab42d6356e942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-relay-chromedriver-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096e192a224e6245da34ac9aaabd4b13fbd2de99af1246befa43a62dfdb33cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-pegasus-ceres-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cce7f7f73b27d1ed49505cebba1b4895214e8d3f89254d23015ae6620fd55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-server-yakutsk-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcaba764b7d0683fc08db311198f703cf88073de862611d3f71439e3a4ded1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-install-express-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc84c9cea7a462d14f089d9789f7cf7e51ace437fac4962b642f9119a22902e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-concurrently-helmet-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01220b55cbcc05145bde2d9bc7588c46bd85939bb8352243e4cbd41f629045a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-jasmine-frontend-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc5d365dcce5e2b678e7f28c3bd51608c01363800de40988c29530bfb10e1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-ganymede-fomalhaut-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a8e305affdf35bf9259a55af9f339036df0c226f0a7e230b625d81909cf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-sync-galaxy-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90a43896fa1cfadba4360b32dc714d88a12f7cf85a3c9a4fa46833e4d72a7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-nodejs-electron-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500e348fa490b50191a22ac997e77c101a33648979a11a6e82de022ed88f7b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-version-build-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bba6079591827284cd67207a074de45cba5c746afc4d3cb6faac41206fdddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-registry-zephyr-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc9f5a910bf6a3327db62a09076f22baa763c53b2d208d4c955df802849b440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...