Malicious code in industrial-ivory-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f4091b09dd34c2f660257e6736992d2586737212b3178e8e0419ab6aa3be66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark-rose-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110924f4ad37517588794a92f878d8c275c72159f5967ccb634e6cae118f9478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-cyan-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5cb161321ab70bc56cf9f35aad587ebbc9b60e0dedec017617512544db9628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual-blush-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c003d334158a29a3ad95455b3c46391f5df6c12b7becf17f5027b575d67255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1144e03351ab848caa6de99c78bfb03b85171e9d5f65e8aacb92f33f3c7bd120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing-harlequin-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8442c222eb4908126032df3eff30a27c5bd0b08a47076f6db3fc9c923930d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-cyan-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9440806ac65f71d8f4f13d191df38c4d776e0dd578bed3a09d67ac1e60e4adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-black-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d9acba61372f89fd423c07756c457ecf75d21cf233e9168ef412bc45e36617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy-green-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ce3555f0138713409d410331f884cefda928cf1651c1df82462d23258fc7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-silver-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab481d663fcab2bda857940c929336287921afc510ef98b5e641eb9a263a7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66653 Malicious code in adjacent-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359afc346aae1c37cbbb589d084f5919491ad657babbff3571d6c8315eb83b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic-crimson-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ea5acc78d34d5ec7e1fe7173639a43079af5ad14ee6f34393648c88c4b4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc206d8e741a0b930b4da3e3691a926149c6a9771793f682f134a6fd81c8b6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-maroon-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ce8006ae10635ff970f030ab093c0e447bc015f9526ff64326f8fc82534d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-jade-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414886d8f2d9e4a3c107c7603642138a6dd93e6cc3641619d681d25197a97b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a300a9b8ca6253d00fa9c2c59b8e486e64b714cef56e79a648eb0522910b68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...