Malicious code in firm-aquamarine-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2964a911f98e9c7f22ba2da48f472a5ba05ee6f2537700e9eb10fa35d407eb8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic-teal-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f8d039f067a11023b228ee908aa0a31b610992b5403b55853d2e8b0a4ec094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-aquamarine-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595653987fa31a45a30f71e6e139ede2fca9020e7ac69f179384ff61a7cdb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit-silver-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e29c7258bb50a74f427771674ccaab7cf9274ba3b186042f543791df74ceffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-olive-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e975eb1ebeb31a56ce0cb074c6bb45aef498c7fd8942916e743ff604551a5e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3b203ba58c3cf2d19cd2d2a4a4312da9df02b8c493c22b319319e4a9b5143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-turquoise-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541afebd01471651746bb5347128897b6e119e38f481ac4c3d48b5238526f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-maroon-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d56813dad7dab93487b9e34a0db2719a81bedbaa861ef460b671ef4a3e379b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive-cyan-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9f97c25375a1cd52b5ca040c99572b1c35e30bf6fb1131f7eedfbf4071b565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-coffee-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56f526985542c41bd32e6433b7f3a3fa3496c5abb254554ab888707d85913d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71778 Malicious code in zesty-gray-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eae6d36a89a09ca09387838d7e4f30ec40ee4d4a5bf02fcabad6a79f9528bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-gold-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869148705d3b12cb5c667a354ad4e4bc63a03e0121612a3e8e369f98691e4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-amaranth-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56daea3b4df95092392eece269653c7092d0a8fbbe3afc80673c1c51b2ff4d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy-salmon-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ea89e186c278eb2423d71cd64863133184cd2332efbbe51300e3289089ab48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin-aquamarine-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a20afc405cdfe6673847f7792aeb3e4c51c8194f414acef3786a5d74fbbccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-silver-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff46723e5051d67aa359bb74848302dba9ced28e1265d10c2a79987afeda3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e3c5d54095c7f4b9f24445b33f2cc6e69e4f97c9e17c68b92a0da548fe01e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-copper-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e074ebfff418cfa8018b3b2c792f5a332417dd9e50086d41abd1eae1f357143e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest-amber-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200608b18e01a83410b49df32c1bc4d510ffff46098bdb42abe9e887a4a6e118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...