Malicious code in continued-black-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89cbac5e3740b4505f505d08a5009bcf63f9c55297bf328b67cddc08e03dadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric-gray-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0df0e37916912c185103a15bfc11173d3da0e3fd18ce816afe0753999ac6950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere-beige-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a4bc64185d18d8bac0d364207516154765a58df42258dde0b4a9c1521d6adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-green-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f6663eed48aaf1cec5b68318e6f1146acf067c78445ce5c37ed607bfc11ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable-emerald-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606a27e43fe3803ba9f00a83081f994b49341b309b0b0c10b8540ebb289f89b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-scarlet-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40213fb2894a0142e877ae2527ea25813893570e7edefa1fbf2eb29f190f4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c1b77f2f2a8a352dee0e5843d55a43942177284d16b3cc2b98612817f80cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable-white-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ff6143b1b2965720b1eafcf6ad349a5dc6c14e2a29d161435041db9b24bf06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curious-pink-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de471e50b0466a3d8419bb37e9d86c4e053ac713b79c68003e3ef0f02ded9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique-aquamarine-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29af42cd67c26d4b3cd449d68ebb9371480cb78a5f88976ae0a3a17d67fb718c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f0a296f427c03808700c5dff385e436352a710bfa118538f2da04d7c12055d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty-gray-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eae6d36a89a09ca09387838d7e4f30ec40ee4d4a5bf02fcabad6a79f9528bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convenient-olive-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919290a0e0535b06052bc0869a80318f991108aab4b0e0bba42941d7f008964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-copper-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d12414add444730a4cc30a6fa36093afa8df0ff4b9a1933053edce4c8f02639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae69308a597c1676f4f4a1fb2c4eadcfea25ce30cc0e5b045233814fb29851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1c4746010c8c717817539b1013ed3143ecb21df2b8bb8449f7fccf9af2bd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616b9cb04877cc547ac0f6832ae1477771155334a52e967b3db062cecc118b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-amaranth-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56daea3b4df95092392eece269653c7092d0a8fbbe3afc80673c1c51b2ff4d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head-white-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc7d9d7173a33289f1943d513610162ea0d290b537863d22e9d673f715ba104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70601 Malicious code in shollypeez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3ce566bd795207c0bc1cb9d587dcab74e6cafc41b530a2c6d9c8a7005ceb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...