Malicious code in indirect-yellow-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63fa815acb544e56de6adffe85354d40b099da10d5e638fc3ecc069be6cf0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred-brown-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8535d9a5cabc2038667a723f22807654c370f2c1b0b70b7fce54dbc945c68f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13832c023176c909e82d8a1b702913d04e85d74ff41eb984c70147e081c5bfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-moccasin-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081041db54ba2a0c2978b0c18d7d167fe74445f2a43e081ec51ce843a1ae2abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disturbed-blush-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60705ff8678bc40c6c32b509cd20bd0759a02df558a1865f14a5f3df28ec926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71298 Malicious code in uninterested-black-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedbab79f019684e318fbbc26ef362842470a0b44535c87c7ead478b37992546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69674 Malicious code in obliged-amaranth-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc98befe8ac2ebe814c48390068360f6c41f6956125697df81d6d75fbf476e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66982 Malicious code in blackrockinc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5969bd6a17947291ef89a679e4113803c6a6e54989806d2c216557ea76f4efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71267 Malicious code in uneven-chocolate-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc028dac9f7f90ca3ac492a5438af1b502f2c845366c50704aeb8c388a225c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67421 Malicious code in conservation-olive-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ceee49120441d56a775da6733f3f392ce0c2bffbc5946f24f8210e018efdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70729 Malicious code in sound-crimson-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3217d5a6e64926c8c698e2c93b1d3f2516e9aca7b26d4202eb3ca167b6e9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67088 Malicious code in bumpy-olive-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba3a7ef21dcb8ddf18d4bd52e1a63f71d4cfa85d6f7f1d171cf2ecbccba8ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant-pink-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b85592e65969d30d08d92baf989861820001848b47724ce557e551555f9f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic-apricot-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c359ab7035fa1e4695fb77133358a40d5666578fc07022b35267e0a52db2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69022 Malicious code in juicy-chocolate-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7d68dcbe7aa9c9413536ba4db6b4d277c3f12308374cfcbdbc31d0fe561e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential-azure-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dc7741f52f84c2afbbc1e73e367189a4d0ba7f2259373dffa7fffb5183e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind-ivory-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886a79068e6421a20272c79d59baa6c9bb70380233aff6c84d941578f497d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude-olive-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82650962279757424e75119d3d4d14a2a6eeb507110d5b8156454af8e65cfbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866109d007f0d94f2c8e06e818eb6d4607cac3c8e9f721226d8b8a3303c95664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-scarlet-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4080214e6e792c1ffe5c60019c1f3a37f17e56897a051132d6a40b0cb4ce8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...