Malicious code in super-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f644503a1707739baad0f1404d052cafe7ed148d6c6397cea8c1f523104ec3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-white-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb42abe5dedf95bed57b1a4d6cc51b8c6c795e1064ccf7d0782277a64069d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-pink-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9690d6a1b8e7dce10554f1198ab97e597bb1ce2c30d9403b30d28c2bbc1f02d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-aqua-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd1876d529ec552b1ebb4c7abfe849f5d6db0661c5ffaec46d7a16e66609ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb72c3e2404104d11029fdb0d5b89fe92bf18bfbcb3eb0e175f011951616ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-rose-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edfb041774f8e3e6273868de12659f2cb6e0686516f1b2a7ad6c08d17f6c634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable-gray-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f797400c958a14c2158f75fe6b3c43089791e015b41bc732f8213c7a5de2220d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united-plum-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea82fdc7ef193e7155758160395eac8f6aa8bb71637d861681cddac5d4f8a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable-rose-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc57587fbf215fc1dab05de8f0c5b50108eca401b215a0b4a4ae0d06f71d408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent-copper-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1723230d42b20d51a2081d12a3762bbefe32c4ea89e57c5767037f11622adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-gold-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd28bba5862f5422140e3e10d2fc4e31fbc7376354066e380688ab965c5799ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-gold-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2218784cc7075d10081552114bfaff01ecb4722a47dd8182d4e4b8152fbd6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty-azure-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa28e6e9f65c1e3b9542198c8bb881f7bc8e191c136fefe0899ff37e91a8f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69498 Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66956 Malicious code in bewildered-rose-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f77e32fdc6eb95a1a2a81fab398e5fa00a338913b8dedfd48553b3fda475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless-tan-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62aa43b338e7dbe17c860b741ded69cf006bc0167c992c7ed2a028ef5da4787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable-aquamarine-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91254bc229db6339c558fa5f160f496e4ac09801fc389f05803086215b3fcc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...