Malicious code in zealous-tan-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0d95ed24a0bfbd87441fa199db1ce78886b590e7fe03453bac0a28090b1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic-amber-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fc3cd0aea7fb4c4b0158bde7013cda89657ad97b5787257f0163766755a1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-coffee-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4662108a78b9f5f79dd22075635cd5e5a267bb14b1526ac5cd8b633c60b6e348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67014 Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic-coffee-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019c11bef911bfbcb2ba9c4528051821341a05afed569cb701fc779077b54240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory-purple-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d1b03182ae210c473438e4a7306662d33412fd22f735e7d495508383cf1315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial-chocolate-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3867f73fe31ff6ab661ff6fb9a25fa0be690c124f85e167f80844546d5b0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-coral-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb67e71fd55f10db222c1ab07efb14b6b78a9f92d11181ab3a612bb3f98123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-amber-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2971f8f8fcbabec9ae41313952e3b1c568585a43272c7ef6bccdeffc81b4c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-harlequin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b091a8e5186ab96b4f634e39f3b871adb5fb57766704d1195ccf70b8a3a517f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-chocolate-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea7eb8d7f49b49709a8f8b1ce23027d86e47a00efc4107db02c8fbc24f35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-harlequin-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ede8cc2d5f23e6c27a45b1edab719b3b29678075f8e8aef92f014d7be6294af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-rose-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d542c9913afabdd3067f0e700abf292bb2c8146498c6463dba237779e5fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-pink-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d21043bd214a99674e2ee428fec309541a8b9e34aaef4ed5b199324c61ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute-green-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c372766d52d748c66e571b7225cf77172d1fcd0531308b79c3483962e6ef51a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-amaranth-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6b0d99591ac6860baf77fb2c229757b0c65d13d182a705840c8e1b4066e610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced-orange-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e6003c0888bcd4e1788f38b5c97de46fd66846046e2b0b91130ce9f8e3e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...