Malicious code in inquisitive-azure-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31aeecad98547796bb475a6aa47c5ff2c76ee3b81911c6fd484c45c992911fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive-apricot-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2a0913145f1a2e86c5162f180bec4e8f15645b1d251446b6e3c418bb8d4108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blonde-yellow-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c05c9dc92ec6a67ce9473814f40f790dcb574705f9ed36c811e73422608e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-purple-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76be90e1c6e59ecba819f5f88677e59b669c6f32a30dbf745c3788250b2132ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful-scarlet-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017698f5b730bf01566ea9b5e4336dd276f8c98985677a467194e1065d4f5786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable-purple-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d72483461dad29596f2b0b27b87440b454479d5f5102509d9d84fefe4bb1527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-aquamarine-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001ebde5e8197fe6edc47a44fee7c2278502b6d50dffa27bec71ad0dcd2c950d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid-emerald-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2342adc95404f1fdd5607c8ef5e9e7c10fe7f2b5b1521f75bc3054fa9af5bfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flaky-silver-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c34303867b6baed98a880564a9196a710bd71ff3e04ee16693cd94185298a932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor-violet-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbd919d4fbf6a7385c44246be3bf409d5b46e045e9a2b637634943b16d4f424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent-chocolate-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bc522767b0113718d6040f93f9c4eaa2315b49ab1850566cf12528235795e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-harlequin-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800c45d4cd3ae5ab709485a99a7c27c1a469c35693f8aab592abf868cbefacc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-blue-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d60ebde77ae0bf470ad005889152e7f3c29c7f492717ee1ed9a278c1d5b767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic-tomato-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb165d2bfa2bd6e65e7ee3ef3102bf4e32e916d89019f9a7185b02c8fa0b5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-beige-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc563ea8d1faea5faaa6e82fcb084d3be7be93bf34ec73b0787f0a81d8537f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal-amaranth-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb638c4a6b4b40009a7e0cf6603629fea3fbefd4bc55ad9dcbfa47d2c52cc7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68645 Malicious code in head-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1c12b9dd298295e5d5c739cf47660cbdf273a32d7b67ea446bc7c038db65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...