Malicious code in spicy-coral-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1583c0be87b4f163e8a941fd299b18d6ee90cb755d084f95cbdf33134d5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right-black-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d93e95d5bfe44016dcb7d0608937ab66981ccc2aef52487d0696950ff1da99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed-brown-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c124308dde98ea06ce927c7260da20d48553dc54deaaff8e7d00518dfd8b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless-tomato-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce704283a1d64424ca95819abf4fab83e68421e734c01192e53c5706d45004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/cosmicchorus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be511f4995cc477eb4c914cfb94863f53259b7518ba63dc7450bb9c88b7ac2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-crimson-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e44713ae9028c1c614bc0be670a9821af15234eb187046dde60d420deca9a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased-peach-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2532e0760780155f3c0d4dfa726304ed89309a929fb13e5a3393f8face27cd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding-black-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcc3ca43c858495b85383c6c61e30af845e68736d499d4c81ca95620234a761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-beige-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df936319edbc12c3d59661d4a607486cd5bf1a629ea290cdef56ee6b70a5b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70944 Malicious code in sufficient-maroon-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d8c7a6b9f4533d4108040aebeb923cd0b7edf4f1b804c486dab6d88f1f08b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior-chocolate-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b63396d06e20fd598cecdef9224194216f88742e716712ec4ab2e9927606d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68864 Malicious code in indirect-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db24658869bffa4aca5f30e0c966494b08ba4606ecca9938b1d10b785a953393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68023 Malicious code in enchanting-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc242006bfa1a3ac7d627d4dcb95de5fe968643e8119d6b6fffe4746e5d4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-brown-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d90d4ffe34bbd1b486c2792fec4bd6829d724d030fd636092ff7e147e0068f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional-black-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea70bdf04196031dafd305b7540272f21609a4a37a01f43f069874a87f7b982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...