Malicious code in pents2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691214dfbecd05bd8282a194106b31e1a651b587a045e4b86e5a83c33b43d343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-harlequin-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4efd7ec6bc9ecc75412f42aef6426e37df2959c1db09f5f42024e01d27678c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident-aquamarine-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c990d9fb26b1d85f36c3951b427ea6ff2b8cf570a31326196291a2761ea98cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-fuchsia-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377dbf16e1afbfafb4d844e40da7927a41bd66f4a032158ddb398c8c2222f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful-jade-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1f64804f30c79bd544efb5798542154401881b9a5dc0cf0ac46270c837a466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous-coffee-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful-jade-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cdef7bbdfa2cf23dc01c3f211f5a142f2ecc2feab0f992e9bad28533725721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware-aqua-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23b196011d5f7c8bfeb882d8b5a9ebc3deab1ef70a12b3fbcd4b8d436f1d6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-amber-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd842ab334b5595d5ab30b6d3ff9909e368e0061930b42f6b059c5710df34b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-rose-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91abb65a5ac6234ceccd4d9c5bc68f74bcceb36516048374b12845b230099f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-plum-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81384638eab155e8eb446d66d499ce92585f324a6a221d4dcc48a227069d0a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic-emerald-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a25b49d9448ddc943d7c45dddcbd9be6a60486751b51052786a3bd13303436c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-amaranth-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6319be03b372d20e6f624df0a8049bc2e1455a1e742f5e621985787d042c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilaosyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13837028eff0d045702ad5989febb6470c16c151cb3b2402fc7e441f149236c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-lavender-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad097a7c78c3365b19f5c6c2119ad0ba2ac1d43dfa734457ca5066fcae35453b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2799c119d24251ae3ad925e7fb575fe210a6b1e49f7b0d32a8e79ff5c08d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-plum-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e570edf098ff4ff8ba812c1c9b406057e1ea61acf5529d436fb67df83c70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender-gray-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c48ee5882f4faccba2905e7e33220ce6985edfb24cb675313579e104cc3bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clinical-yellow-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834141086b628099a6b3b4ecd4163c702e060566bb87e8d08fcdabd032c122fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68444 Malicious code in frozen-scarlet-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8caa5faf85525412ff61a0e89563b7c181738d8e81076c07c3ed90319bd874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...