Malicious code in yielding-amethyst-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8545eadf967ea98f29abe5ad0704440faf67e31a3918609208e3124a1894d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial-white-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b9a60ce0c34f94b22b6cae4c3facd32526adcb37f614221ef15f905a86dd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-crimson-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e25c58eca5f74cb2ae8d108780cc99d510b1fb1d36c9bcc64d3aea0638dd6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-gray-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7d59276750d51d23d9926b45774a427f9e0a6a40d57887b1e4a97f47384fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-violet-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd2e0cec3761605ecb08a23b6adc458b99a58468dd245abf1aa9f7720dfa597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/vividvortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabea9f0d2062dd16b78433800d3c5c4f91e4569aa1947f2a6d042e1868d59df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top-yellow-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c377d19d27521e4dc0c083d30f73aa6b5f83497cbcae5b66a72cc500ba58c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-tomato-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb12089303b6314dbdfe10ada149e0a17d27ec84259aa9ebc7ad9cd54af1c86c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest-crimson-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5718130d82aea56b8775c13e3bebf47d57dad049a5821b860b8b91928546c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-gold-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93186d6beaaedf183c381e086d35a7a979389e9422dc8bf83d60ea79c721f200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-yellow-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b89b61443160c4cc154547db284d2e071836223c8826dfbae83551e2c4f2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-rose-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cff6b9b9d5d9dd46811969f837b1f6a70b6edaf991c38da5439ffb4e2700f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71796 Malicious code in zoophagous-peach-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf463ae7b2abb09e1736b2d0c533e373406ce7e8fe3eafa5b09a7e45ed92934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69834 Malicious code in passing-peach-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcd93132cb3f00a5f5d160890ca900f1b73283e2cb4e40f65f40049cb2be8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful-orange-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e3e2587944678e99a095725bcd100a9122b8c5ac448a68e78573c715a21bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-blue-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d947d5ff9fa98a2a402c8f0f1f39d85659a2e50f6b414cc48210c69253320a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny-sapphire-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4bba724f794326ba7b3441fbf803117eff52b122a0a6c52b0c1a0fbfacc5e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...