Malicious code in intensive-crimson-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c71c62356882e9e50a702269dda868bd17acdf6e84abb56d2e734e96546521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch-aqua-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4332c39d396c4c83fdcad3e912bb7eef53582c4475ff775b2adea5faad2e6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong-jade-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52a412b59642d16762893fe9cef9468e722dff49ba342b0cfaa637a67ca85a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-maroon-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae7ffff45f6462ee052333e75268751b29cf8af656df9ec8a8c8e28c53ea070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil-apricot-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4652a58f2e9bbf7fdd18bb1bcd9cdfbc5f544cc85880451345043c9e6fefb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary-apricot-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbfa978e228cbef1cea3b0e9dbab1cf04eb98a63d54d4daeb22794fc55b6441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-silver-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cf9d6fdb5102bed6345fdd599be7a1e6ec36f75a8ac72e2e9ae979e3a2931b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-beige-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df936319edbc12c3d59661d4a607486cd5bf1a629ea290cdef56ee6b70a5b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible-orange-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50099a9213b21ea143f55e6dd51732b6900197e0a67ee5959f34cc278968cfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-magenta-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a14106672af764805df4c0100e2a19dfa8b7b38b2f66cd2c9fcfca1c8350bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69566 Malicious code in naval-gold-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c25a2b8d868d9b0ce0c1e231ceecbb6691c3d35a95c7e7938779faa479e39ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71330 Malicious code in unpleasant-black-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e559e8e544c85b20ed045147a6c541bb7641086ab63a23534f5fb1d9612becf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71688 Malicious code in xingyun69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34cd3f36fca407da1cf325e7afedafaaf12f8a3f888ca9a7bcc9e791076228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68336 Malicious code in firm-emerald-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d24a6ec7ceadba4b185809a7a27811f039157211616f3842c6766d080e6bf64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official-chocolate-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9802dc82b8e685ef80e979e433f32ad19d859031ab4506373d24bd68d3c92755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular-white-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e330224b92cd1fd2ec49049fcd319e50feb3476ea27322623a580bb948b261ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant-rose-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856d464e7e6dc5f351612eea466e6dd6a0a33014a05b895b94b5f5c54bbcafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous-apricot-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9207db87e4031c77913a4b269d478ea65450fee184212b367c29bdec8884d423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...