Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-violet-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8ed74d52c018d3f436c4e5160d90c813b993365db317db7df3187edfa84127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-bronze-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6235956f79263662ff129bf606e13aa3be29e48587b62990b39121fd5ecceba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-scarlet-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e68e0abfa126ed9a00df5d880d8aa8c343dcd8561311ac2a621845546131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible-moccasin-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0696bf13796765e9f11e454569a284d08905343e4d8a56a4b1cc7e6b18167bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vertical-tan-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891ce3f3cdc86cbc11874359df91f55be147e36783a5e63106eb26827ff876e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual-sapphire-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145890cee1c2fa10a6220a4248f04920d81665c41131c90393d46ddf81adec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest-peach-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4394323375238f4ed22654659efc38396d1f9a6d637783288429de549a30775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent-white-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6ae3be87e50b3e38adca3532616d5f72ae2bac81d269eb2a1aad7e2f6b98e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front-orange-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9705a099d95cf8a4ec09a3028753c3ad3a744afe1d1204ca5d100cffa199c233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic-chocolate-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff6757308bfc4f64a421cbad9dd00a862cf2c1cd4ca29734edb33e8b5a74e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-lavender-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a49d7824829ccbcec70709427acac77d9eff0800942d1fde35d0872bc00fdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-amaranth-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d0b9c301afa4cb3826c51032b235c15c1fb7871a2ee762d94487e17eb8fc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-yellow-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e1250dd1a16d5275b1b20af8686b46da93fac4819ac03e23beeb36789fc9216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-ivory-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5613952cf3ebf04aea32d08bf97ffe7288d665227f2b4b72698f5bb3cfa852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-coral-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413a9d2909401f377612ae1ecae91c71cfe0073f26b8794dcaf708331e021b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-jade-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc9d0940a03fba9aabe43274306933ee45eb4577efdfaec3cd4d66d3aa05f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67703 Malicious code in delicious-fuchsia-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a396834bbf1bb7030e7e476b45d1e8f92c05b43a97a954738b083ecc5056f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69408 Malicious code in ministerial-orange-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3a8efb19c5c76f8a5aa0fd91d7d80e7c45b4d3e7ac93106b607801efc4154f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70231 Malicious code in reasonable-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d90cb2a35042d6b9b56ea2bd88e112a31cb6d6f85e6108dc7258b207ac0314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...