Malicious code in southern_leopon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bb8ebd415f6d7f3857d8d9f93d2b48588593c753f986b4ac2ec4647bb1ef6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_emu-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a79265c672854e9811f41d2eaf30e66dc8247292a90b2f4440d9d3af00804fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arrogant_wildcat-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9261511a08ccf30da18b8452c455a9404eaa31b24a70400f2b2e2e3f7939ab35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_vicuna-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a663d289859382765433d73924d320426c1504607159cd851e275687dbd667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yfhflc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e8f79b03c2188b26a1c1cedfc9fd94c6d9046d157b15e30bddde99915d134f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mvtuah-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c5da87a5df320dc634920e80d7803bdee52d1bc9fe7b2104067616d0b56f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orjyvs-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f403f0fe247f11f9d82743a9d1f56548b52dc90983ded50c04d8f44792821887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gtyyrg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3df4dc5cb896cdb8664d11a9941b996c9159036a25fb518802644c6a27432eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_catshark-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6e1efec17b1222ba2309deadef91f9321c42563237956ee90fb248547c561c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iuqkus-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1623b9ee5255209feeeca56153076f86e89988d5ec2bf77f411bc672e7b569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67de227cbb307da471270136a5ef39b99b6985ed3a0eaf608bea2d28e4b432ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_sailfish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac91209ab385a0a436e5a849fe1054b5a3923cbb76d2304fcc94d5b748b3089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_scallop-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb5aae9ca7fe5eb5dc5bf326db8dad6112d07c07ae9513453bbfd6c6aba70fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_stork-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a17112d38f8dc35531abe86745ddc71e15592c9399a2b047f2c0f253b76268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner_barracuda-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3228ae51adc666925758714adecd54b4b8e66840dfe841b62507923164a3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44de730e1496fcbcb96b69c8eda3540e52476fc8a0aef993f419f6e5ed42c3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carbdgonara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d2c3b11a88f3747af265c96348542e37cfc010adc531d327526191b75b6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ngrdlc-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 171d1fd0aa3ce027237f33f977f8fa94918bc1c27b35f14588f4c7114351100d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary_vole-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bc6707f444b7bf0aa9a8ae88199e93a46d871db9d0a7d3c4975e6e2af99685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104367 Malicious code in intimate_wombat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eaaa101478c1578dbc16bd1bee57e37d30f20803b427862730a280c1d21672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...