Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62a9072d0de720446707058a88dd8d28fe9dcc26968e07cfec16d4b822e0959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-black-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a3cd036500e2c1ba1c2d1c46c4323b46dff5f713f588dbd44cd90cb0b3042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-amber-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c214348716d73ee2271898d203b2fe300efd95831aa24766074fea8f365783b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm-red-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec8097af94f5ff58f0fee8680de758693057beb96bcb5a6bcea3944c94640ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back-tomato-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc9eb96f6ea491f125e2a8ffc9ab979f049abeece0051f7269e05d6a12ecf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing-rose-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53339d445a887cc17c7073bb86fae58ddfa55e64920f44ec0c8681d97a276e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-jade-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b9fa79a23d697727fd38892a3fec012b292541c3c9ba468beebdb90ff64a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological-gold-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145a79b328c66987ae84ddc2804d7e49501a8a21ecf91b8a29dcd64c86f55f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy-tomato-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb06bb54e19101d21d06f89b5b4e447484f3a74c39ef7c11ce6033ca1caaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-rose-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a79522cea948231fa43638c4e02b0967b64522b2d2fc96bea075100fb1f5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43b075f682aa8cadcfe15854f6c79448acb195e1b67c6d96418cea018d9a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d367a7652de0497384529f73d29ebc0c9a72e11de0d4b99b21ea3cd0204ced4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain-amber-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b871cf67ec2c5bc45b9d63602092fbdf443082c0888bddc31a40dd23c3272527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-bronze-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bb2b9d5bc275f2075b844ca5ad10998eaac7135026621e3d3b63f521a9be0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-purple-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f05fd2a80e7c60ebe230c9cee5cff9cda413096fa0530180354ef768676e96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69711 Malicious code in old-peach-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16c8f991cc7046285f814cbd05cb7c9276a9d3db91a0b68e5ba26b3f842e267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67668 Malicious code in defensive-cyan-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8731c0549606a5894f4d376bff280879a46fb0523161cade1fa51fba4e6af76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70536 Malicious code in sensitive-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8ad81460f788e0a350c0f4029dfe3a16ea5b01ffb294d21178786d0942a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66934 Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...