Malicious code in unsightly-brown-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b143ce9e77d28edb28ee9994844f9eaebc88fd306e41ed944e3f79925ecd7e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-amethyst-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc41adc4b88f86783414b015f2d078ab908b75c78ea7e977bb3262f6f47a3322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71076 Malicious code in tense-silver-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc77ca8a118fbec40600961002428c803c6f635da56982b445c71a91f1a11bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning-tan-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939895f525edebadeb7a05e19bf7ec496ae88a254fca3775e00fb49ca8f4beaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45c4b7b6a2d5334851c5e6ae5127ba4fa28e23c7b847c3a4d57bdf7e058ed17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental-coffee-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c6017187968e55257a37ef5d357479dfb6fda4c2438d644d3763dd8b6a35e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive-pink-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3a3c6d75d224d399e240ea3c9d9d44184a20cc948e8bef9114c02046814c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready-salmon-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6ef8e8554870ba4f8154d6cf2364a67a735f674280d8501e0ae9b6b53717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female-tomato-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf66d89a5fe35f8e5d283738c9d1a2f46c3a30e201574e499dd5c11499b0c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly-tan-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7337333e293ce3d1b7f0a5080313a4c49bc3a1a8bbbd0c1ef5c6c05997ea5ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational-harlequin-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45399348474ba14d593324f679a79f854f8195711015bbb06be5a976188f83ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight-chocolate-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8605d922c52c7978f75b6807611b38a1e304f12e371180beb571d26b1326428c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-azure-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290eb5527ba978d9f913d813a34e27c4b6df326e5a2f5459023cdc92578da80e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-salmon-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f15726de6e2ad29aab11659f5261364fa17c58a75786fd919a69de2a427349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative-green-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7d76f2a7194ec968048ce9d89e5182e8bd1e37ef1505ea1dfd35639ed22f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested-green-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da78968ea1f614a9d7ada040b17d45943205fee7b5b8edcbe86927d15ec04e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar-sapphire-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53808f5bd9400c4f2a088bd6d7e0ebba996eef66fbe1c380418c50f734eac4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure-blue-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d307e98103f7c3049692d8cb71c5b7d7cf3fd2c8c041b23a518a1573a7e551be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verbal-plum-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b496d1ab241484cba97418c9cc84d80d0a343b2810ee771b907e40463cab3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...