Malicious code in rigid-orange-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4318b5396edf0efe3232597772662834928726d714f4bc279015987863ccf387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-gold-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8853c5cba4d87649bdd688a55e4521666629cb028433af29f15d83ffd9ab578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dragyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f571eb05224447a1e23688acbd310f0f9ffeb41114c8ac14191e2c926ec13555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-turquoise-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd228d559a82b995a9e6128e1dfcdf41aa5392539db14b9dfa45f998129baf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic-amber-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22e2e1db8bd222c9a6e0147fc20af4d7973d1f81b233b5ab0c7d33b3452292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68684 Malicious code in historic-purple-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd4f6743c8f2eeb19d293a0518149d120c3145785ed8b89d8463d6f4766c508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low-blush-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbb4f7ed4371db5d697bf33e6ac6b94545283a8118d2b95a848e3f1aa6275b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-tomato-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55c10b58e03019782f3b0ce1e95ab740c77c8d1bb09743871c8df0e6a45d884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1535b1b6a124b5fbf6bdc30c9f814a430528e3b72f995ed75b88cb9bdcb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66882 Malicious code in automatic-scarlet-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e846f52ea0f66ec5d6ba06e6207b2100f0f07b7ac28281ba3d6f1468a6842f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large-salmon-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcb98e5dd3c3980e4544be863438875adb4f6cf34bae5feb6814243f955009b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest-crimson-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5718130d82aea56b8775c13e3bebf47d57dad049a5821b860b8b91928546c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-fuchsia-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dca9f181fd031d15806dddac0169ed1ab12517f89843f8838a101bee31d8207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged-gold-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0402650951201a0aaf4894790167461efcad02909383f1728e9fad9ee196c864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed-black-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba85e9ea99089dd732149076557ff7ffbe87e139298ea3e48898488b261e286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dbe179b2e68e2538332172aa823d6f5881c05992b72625f43b5269ed12cf42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70043 Malicious code in profound-gray-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbd0fbe549adf9cfbf2db3df1f64377a2540538a34b3a2243167ae9f9d12805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive-scarlet-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4803120d621ccaaeb1c27d657cfa0839a69e6d98f113b92821a0022c8cc9948e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...