Malicious code in melodic-gold-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ead1f36f6e54ec7ea92506786df8899e9028cef25f59e83a39ea79b564d02fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset-brown-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62a2382b1b0d1d4f63b419b3965dc1227c8807ad95d938b02750f3f19bd4c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-yellow-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dee708b72007ae81d4c195984d449a2d1d90e946ea51e149509d98652839f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent-black-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598af1f052e46466388dbe7e2cd5881929a9758aad874ac032f2c30f3b7521d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nosy-blush-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae8cb1c55363942d9795f98f56cd9ab2c58aabafaaa3494e44297d4cf7f2df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutral-copper-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae984325af59cf81691c20859921d7e6afa13dd79c73f625647d9458672db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest-purple-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d899bce0438bd2931cafc52505ffdef936c0dce2fb2598bb6fb7f74ab92c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common-crimson-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d39a247ace562fd0663112b6e16333610e748e762b8e554880ff3c464d3ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given-amaranth-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c2d5761d03950ea05f7c85692de994e4d003d1fd15816f8f63ef94e134c26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-chocolate-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15aa5297ca5131f550b695fb3064ca96f51fd43ebcbdbf0770eb02678f7d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-olive-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e975eb1ebeb31a56ce0cb074c6bb45aef498c7fd8942916e743ff604551a5e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-coral-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3589a5d770d47f3d3b30349c1143360702bf908c298903f36f82c2454e8dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-coffee-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56f526985542c41bd32e6433b7f3a3fa3496c5abb254554ab888707d85913d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-white-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39d868a57c2fbdb55e161a2b5b1c898979009a06a341429536bf82f7e02173c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-aquamarine-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595653987fa31a45a30f71e6e139ede2fca9020e7ac69f179384ff61a7cdb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70700 Malicious code in social-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f293b6cb9099665d8d33a13b6bfdb0c3a27efb19d02434a46a9bc60c3685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...