Malicious code in defeated-brown-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdb4bd13f546b1d20d5210cb4d24f34348f24f433288c54f6dd47733fc681fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-beige-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df936319edbc12c3d59661d4a607486cd5bf1a629ea290cdef56ee6b70a5b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291f0573a7944df5799ab3f9d6a3cfa62253779e4de8dd021611b2a932118761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-green-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272fac395ed048e4b4912a4bc15bc530d6f90e4f953123d2a78b6515b78bf641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d467d38ef61cdafcfcc163e771ac9688ba2952a03605e694fe309e09fddccdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-brown-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7e9ad811ee7126d7567fbe41b823891984378f252e95a6e598b30e8a8f4249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy-black-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9b9ec7400b79b433176f1c6a1c1ba21f55e22d30cae60eda0b2729b0af0ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative-moccasin-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d9357cd3b173e26110bc01335c184b691aab1cf4b2aa28c4eeb7b8c381c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a00a22a5963761ed0d5429b8fbb00dd6a8b38115524fdf1280d5a0d062bfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b26954e9abb77fe3981a70a04b4cfb6dab0be477cc81cfbc0e74fd59299120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main-coffee-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399e9569f57d1f6e9b8028b704c023bbfb0e549753b5c63a174fcb1b87e849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken-olive-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701c3b9151f568cf54840add388d8e29980990fbfb2d3e9892077339aa50e29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed-bronze-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a2adcb1a0e27872b5e4d3a1a845ca77690608003cdd25bec42db4a61982dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying-indigo-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f984810ce0efa3ccf61187cb191049ae965e66d375b14d2524f1608fcf7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71745 Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing-olive-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8c664207d9020ca291b543eb46e364486ca2f5556fcb0019a877e60e914b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset-magenta-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd465043101730d099d86c31167441fe11423687e0042e3218237f6f57d79bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-orange-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe1ec031559021ee997f82088e3df76753ec19574fe779efc06f0c21159a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...