Malicious code in essential-coral-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0750ff917e95d976d044ee0850289b332a7449f3d605c39aa56ce1688c885c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average-orange-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0954fba9bd267a513ecb8080374cab3f013d749aae05677c8ed0344fc95ef627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67974 Malicious code in eldest-blue-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3ac34afb6cd8122c3798387b9662689e060aff66fd75fd69b4e4c0daf940b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70075 Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70115 Malicious code in puzzled-gray-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcf01df41e17086338f54a32182be4cedf919c700c412e4c919fca660d2a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68898 Malicious code in initial-yellow-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecbd5eaa570a450f38f5a39399b8722e79d7e63e97095dbfed9adf168eeada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-amethyst-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e1d1c33b23e264a94e5e57b411e64e7f36daf1ff1b59f0f11d3f07653116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1535b1b6a124b5fbf6bdc30c9f814a430528e3b72f995ed75b88cb9bdcb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-yellow-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d335c92c424c0fb20d0ab19aa67affa008f724f8165dd957ede9dd6a3c1b2dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-amethyst-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8545eadf967ea98f29abe5ad0704440faf67e31a3918609208e3124a1894d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial-white-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b9a60ce0c34f94b22b6cae4c3facd32526adcb37f614221ef15f905a86dd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-crimson-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e25c58eca5f74cb2ae8d108780cc99d510b1fb1d36c9bcc64d3aea0638dd6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-gray-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7d59276750d51d23d9926b45774a427f9e0a6a40d57887b1e4a97f47384fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-azure-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca8fce8f2a4a32feeb5062ac8dcb2db3013d1220a1d8900ac5556164710929e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-violet-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd2e0cec3761605ecb08a23b6adc458b99a58468dd245abf1aa9f7720dfa597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...