Malicious code in defensive-teal-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5785f02c1e160b08c4add246feaae73c158a8c6d4c1165b11e40d59b76864697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured-jade-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bdb1b4c10d45c9948b5ecd0e46d3370dac2a30caa92a2f4f83835eaf938adc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfactory-scarlet-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfadf2cfc2445e713d1794cdb1c4fd9f7a71717e2ca7d499804e98924b25c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in armed-copper-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3af900662ab8b2fb082fb4f7eb88662f90e80868c3be089ca49203360ac4f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay-peach-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a8639fecf14fa3a91b5adadef3c1427d4c6902bef8cd523e1d06f167b629a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-harlequin-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4efd7ec6bc9ecc75412f42aef6426e37df2959c1db09f5f42024e01d27678c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-aqua-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ffd622ee92435ebce845cdaeaee2600c3b254ca14aa600b3be0658d440b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky-moccasin-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e67fbdd254c3379795abbdc885726a08aed5e282ca7eeaa0637146088f306e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate-turquoise-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce0e2a2a7ff8924301373ed0bb7d97ec93af70b3bd5d9c25d6fd5ab4043984e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purezhax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c484aa032accfc0b4d4854c5c4bfc8a38558e9d8bc4e28292d6938eb7bba262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial-tan-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cb8ca2ce374b9ac8058205b76c203490d5984f9b52f9e8f922954f42406ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical-cyan-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942e43edf6c19fa621c8dab170c464920cf42f634be0d22a1339327174535f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy-scarlet-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6734badf17ee183fde1a820fedb1eb2f74698ed919a64e427e1f360ceada42da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive-yellow-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2334f25fa44cad456c8eb973f0e3e580bc180454784642cf3fc9f8943c291d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle-teal-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d64d210b8656b3972c601087880e9869a8c485987c3c0dea3ef3880665b117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban-pink-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b8e122aa57577d4920fab918b68243b1f825e109db62b540cb2b9f1f82960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large-azure-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39282620065f1e333f5287bf0f3c7435c32b21ee507f6b70012ee586c8bd029d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate-apricot-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46d9bf47db867a3401a99a9ded5699f969f1cbf91c68163edbadf572903b668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny-crimson-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4deb63bd46e7bda6ae0e8d0132df3735e3def37182f7ffd9a007ca586ed5d042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68645 Malicious code in head-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1c12b9dd298295e5d5c739cf47660cbdf273a32d7b67ea446bc7c038db65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...