Malicious code in distant-harlequin-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5f3b65d9d6a6aefcd43092572d27b4f6adcd7c6acc611301b6273a0b4bb898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed-lime-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d5a5dd033b4ae125139d510ac5da4a1dbf332289548286eb235c88760b59eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889be5c551096bf4a89208fce376b53d7d6fe26ba677d2bac4150f47ffbca225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-amethyst-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fe6c761c83ceda4baba3365f9d43e8d701ac2d4d0537e76aacba762a8641a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated-copper-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e090fced1bc3b2148f98e8582bae050046128dd03886782a78e9bc7c74ecaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel-crimson-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad247f70cdcd1fb2fb63b4813cf041a349664121df310fe8a1631f678e94d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior-emerald-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913dee10251018d4488c3e10ccef257ffe788580e176c1eca812218b854c47fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d636daf04a8d75058a259dcd4f7dec0052e9fcb4bb953a1ae67d35b49c3dec8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stuck-copper-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb917896e7479626d48f4cc7f5e22c8d5e60b113ec99cb8004a3faf1585cf4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding-peach-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30993a24299328b9093093a1575e69d8599168ef8daf6f040549b7f23dcc8227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged-coral-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa345f72bc247454a40bb68a329340baa3a276d52af7995e480bfe73b64b6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-magenta-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f454b10aac316c8b8ee8107a4363dbb35a6765c2df3aa2115aa2cd82a4c8c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-maroon-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a74b16c48751dd91ee315fc8ba82366284a4a454ff04e12837ce63102b2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong-tomato-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595c945bf8dd5957883008b286cfabe244fbbfd9474f87330555a6e021d0bc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-apricot-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4851cb4965e37b2bd83109df63ea6eda692fc76d3c3bb89b9df1cf3986208728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in realistic-silver-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100cf7b9bc55fd8a9fef614f27683e84dc6fb000dd62834c35627b4013293d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent-lime-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14149eba2f834277483a3aa4250b95a72e8cfbbe0302149b3457114ee893e7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired-tan-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d044ba7f9699317d8ed43952f2afb41ad002551fa0a9529fd4a9d8bb3e24a322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70326 Malicious code in representative-blue-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e969e824c8b1016dc879addcbff6687f7c1f4d5ba6fc3aa9584d133deb31a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68371 Malicious code in flying-amethyst-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d89eb1dcdbc4851aa1ba44c692c71b6acb04e6cca27b4c886ad5b66d418c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...