Malicious code in precious-amber-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2971f8f8fcbabec9ae41313952e3b1c568585a43272c7ef6bccdeffc81b4c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-harlequin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b091a8e5186ab96b4f634e39f3b871adb5fb57766704d1195ccf70b8a3a517f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-coral-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb67e71fd55f10db222c1ab07efb14b6b78a9f92d11181ab3a612bb3f98123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68950 Malicious code in interested-yellow-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe4c85028d67bc884a414511c71d576588853c81295bc7508acec70d97400e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70877 Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68713 Malicious code in horrible-coral-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd76c69f6ef92b0cbb6cd4464b0fe19d5af6d69185be829bc0ffeb85ed2a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71440 Malicious code in very-salmon-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f978513608076b5481806fe9bcc24bfb5188f4c10dba9b44c175805234f1d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67042 Malicious code in brainy-peach-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a991969653c031e6f86963da44038099d6353d2c5d6b10d647ae1123e3086bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-jade-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414886d8f2d9e4a3c107c7603642138a6dd93e6cc3641619d681d25197a97b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-maroon-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ce8006ae10635ff970f030ab093c0e447bc015f9526ff64326f8fc82534d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-azure-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e3e95b1e91c3261855f3f67a1388631e972d69797dff87789b2bd927a009d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel-maroon-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73950d331980a83c97988a865accb1c7280bff2f7566f7e335dc33906535bc3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-rose-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82e59067f7766d27f22c0c14c15b2e4de8c7a8827d08349ede3e733717bd5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...