Malicious code in crazy-amaranth-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545911492793ed2d6c2a3dc925efe9a434da5e568bbe565ffa3d61d6851a390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-sapphire-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0f9664f27f7cb06ae899154704a7c3e9bc2910086231813fea7354ec0779a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pollenw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5839ca4b3ede3b48c286aff99e6fb039735ff8d84766e421910de49b9b22f1d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed-amber-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98632ed83ad3bf64e2cd6d740d0c845522ba792fdbb5c100bb0f8fdc0dc3059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e86fd9246efc60f6a3214cb6e746efceb48d30aea1719645b5f6db46635f326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding-tan-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b8c513fc75375c836ad4416b6b0cf66b73ea8b4b34a38034cf30ee8c4a596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valzey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09de27977f0cae16d2d417d8730920a220f97fc3b73ab4d6960bf93fa2183dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fractvh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150af110a11dab7c9cab01bd6e04a41afc039b413f5721ae9d17a0adde99c50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake-moccasin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73da3a70a32b207227254b2689fb531bbb8ecb0df8b07400310519597b0224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72133c33248fbc70005c559d2fa8a0257a643438ea65a2bf47e4ca8209579d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital-moccasin-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6ad3e2215164b2dd272f366ad08508a1407c7a87baa6c9f84dcb3c7d5cbc04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-blush-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e20dc8c56af8006c1cc75a3fd965876d1752f7d3be749e0e4466cba91213af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-indigo-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3e1862f32f2c7cf3c5431a4ef7e7495e88dcf8ec288584c903ced7e8661ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable-teal-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6a480fb8414ae1267ac15aac4330dbded04bb8f06c25d26c79d19a33c54f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-blue-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5d788a480e941f1b36b843708ab8ec0619ef2693bc8cc761317503301969f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble-beige-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def5b3c032139e1813f635442c301afa3e46f9f00e658988a770edc1e5e94b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic-azure-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a42edfca722b4a08ada482e69418048165dca86b376b2d6011b5acf725bd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68113 Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66626 Malicious code in actual-turquoise-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f7fd5c7a9c8957e78981db043ec117156242e6a94a55e1e6490b9cc22ea93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69289 Malicious code in managing-chocolate-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28afcb7fdaf29bfcc8622c6c9e924436dbdf028325484b2265f4345c5f457d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...