Malicious code in widespread-silver-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a74b73bc1e27ee6849d4920bb75e960426f6475df3aeb20370b99f7be73b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated-sapphire-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6106800e1040b6d0bd3035d7fdb86b0f2a6839558d8ad8d54925fff71267ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f293b6cb9099665d8d33a13b6bfdb0c3a27efb19d02434a46a9bc60c3685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed-turquoise-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68508e16004b4804b6330aff20ca031404434bc9b0893a2aa72d53d85826535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-orange-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d6d4e54cd6513574c9a4596e9b1504bfc2c362d3419cd12379bcf1e2a28cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-yellow-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301c42a74a5be9343f5353efb6bdc9b511fabd842b30a9c3917605e0e1169ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfhiichwan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15abafc47b11e84479382fbc160b2f7ceecc705d2aede60b6a0a43f0dd39a09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main-coffee-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399e9569f57d1f6e9b8028b704c023bbfb0e549753b5c63a174fcb1b87e849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few-orange-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b1c8c3eecab41b696b86851346ecfac37e182f047f9bfc77c977d371e2f587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal-violet-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3677b124232bf15dbc7a95bc282b3ac80574b61621475bc0e76001d64550bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-azure-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9b688875b4c9acae2cbc6767ef65a7cb30911bb9d740de8fb51c7dca0efea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71146 Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67805 Malicious code in distinguished-silver-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d76ceeffc278ca6cae12d3112781243653f486152e24f0cfa1fb26298bb2d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-peach-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c9dd6906e692293eb4921e9ea447f509766d698878811aaaec3f24c47a104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-gold-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61bad47b0d5de42a99e5a8f18c2e50c6efe9d5dfae230ef2f19446a1d3a964c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-magenta-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6750846f1d3fa02cf5fffb1d59a38ee0d63a00c530eea13a92ec8d82b7b5f25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...