Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm-amaranth-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cd7b441388cdf2f629a286f7aaaa39e770ebc6a590370f010dde29ca9cf705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident-turquoise-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe891155642e09a144573d907d878f0966acbc4cc6e48c92cb8f9b9f3227a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-blush-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f96f6408249c74bd44d42a657cf719eaebf4400056e9b75f580611b3a8838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-moccasin-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab81556d45afdd328b9cb4df3fbf897b7774d028a46e50bda4022dc2ec57a392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible-violet-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ef472878796f8d316298135b7516f147fa2015c1c04d8623a299ea95c8eb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-lavender-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82aa6256ec4e79c8981db54b42b923885226588edac38824f132c7c21a471fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-olive-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e15878eae6d74a65b00733c0347140bc7cbba7a4623c92b81778df51a1d7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8021bc028659f460cf303cbb57879efe8a03c5305fac5e0e863656863ed3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-blush-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095d55d4b3344ebf673875304db54a02e15c22ac8ec1997be78a8e5a0bb3a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-ivory-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd792ae362325645b31417f54d30c2a9095b6127b15809dbf7dc756a310140a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational-bronze-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957e65df793d34ecfef741addbd8ac9989f3f0647eeae5f2ad7bc8489f57ebc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-harlequin-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e0e3ea278465aa8e44dfeab051e3e5237a98da96b0428869d4038ccfbd172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless-amethyst-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7615b7562d0196f4f8b46c7bab2f356fa89a648525a96a2eecabdb68ccc966e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b45ed647dcf5d4befa15f22ec6e0fc0c56c8357dc4a156a7d175fead5fa81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xatashzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a21fa75335616fe33d30bcce5bfe6f52297ffb7b971adf214075e315d0b0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical-amethyst-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e57fd3542a57a4b39709cda0e95e2d004279ca71348b2b9ccc05ebd41503953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thornypric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971747ff4396df72c7620410bfc1f52e5b8c7bc382d9f284560d4756bb6e8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-tomato-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447519bb24a15ea0fefd750380d1c0950f555489134aa2e73ebae574bad4b381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69855 Malicious code in peaceful-red-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391d5f5a1f26d5f7ea625eb78fafdb2859c3af95619a60b1a328222df491af99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...