Malicious code in informal-harlequin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0eef2ecd089c27212b3f2a848c875503c8b4334726d16741cb5938e6b084e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like-maroon-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056e9b7580d1dc2eb985083d790e4ac0e9189994e958b13de6a22dfcf682ed84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky-lime-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67742340f3615c105d88c733b19ca0c186f5843335f10d893d0a43b0533567bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-amber-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ed40c8b04b17f6b698b73a7a6e924a23f38077d476bf143386473f17601e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-turquoise-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea514f59bf6ddb07caf7272f6c09a7a69bec593f364ff03e8ab690405262999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked-salmon-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46db56460849df63684360b7fc715cc8baef7aec6d0c6f85808918026e0c6a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-indigo-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd60a29f0c73ca947c9e2fcd56e1a782cc986289c66f2fba5ee00a941ab4a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real-turquoise-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5087c54eff73cef18feb688a972be1cf0e30ada99364ead654f1645c8a695aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running-aqua-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e020ca8a7a636d75f70ad620248ec44ac6a0d856a307afc390a2343d66e1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-indigo-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba99ae7c1422e3987e32a11ccbee5a19f7d32328a3d9d113586ed4606b9b10c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent-yellow-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec6a8edc225597c51f05633ae3f20a7723c3c37df4914c7ef072a3fd46c413c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy-red-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c6fe9c8bac6d35cac5380035fffe7d7ebf5fed0054472cba672fdba088f5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud-gold-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3c6d182e73dacc636e228f65f83be9a23449c82d0cd8376a727013598ce9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy-apricot-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60a5edc1e8730cc0ba52af2163392541278251094a2a7af81bca7f2128ada6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-blush-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f96f6408249c74bd44d42a657cf719eaebf4400056e9b75f580611b3a8838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70083 Malicious code in provincial-black-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d2c2e4fe62f1fcc86d213c43f8fcac8b6e5e02e7338212ef1500ce5bb2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural-aqua-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e3455e90561789bc8d23615f22873b47118e0fd7fdb19f829f84c7fa7112d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/ciphersage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2a5b3466a9a0966cbec8fea3a3c30a21f29edeb9b0c51f8e727affe28a1106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...