Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-lavender-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89b456cd94e5833aeccd8fba474787143f53192382517e1040f22997c0967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moonmooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a07e15a119c31a9846d824ffe4ad9d996e2b78aaad96a1fee8e0afc4fb557f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-jade-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare-scarlet-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611a0255c95312e09133347f9f3ea535c17238e701dd561142e4e358f4146329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living-emerald-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4057aa20b1b48a8d274029c34822eab70d491c684c98e7ecf21c4dffb3fa5561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low-brown-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8af030f7d627b1654918f903fd17f71c90e134d05cb7867eb36f7c2a41007b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-white-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa42b5c9aaa5af0f4fc2a89efb7c94bf0552b379f81d660b6a2672eaab8de035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting-gold-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5570c8b0a3cfe16514b40291632eab8768e38054622b46e6fd1c12d1b716d73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow-sapphire-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdbd0ebe709edda9833df8e7988d79dea8a24764b61040f6b552de6a2d3a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant-emerald-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2021771ea913fb731998e2aeefc897e72737f6537e9dd0179c38b252621284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial-blush-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74268585cafe04b13ac1648b205bd954184697ca6b99ce1c0cb8268cca0e33af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68808 Malicious code in impressed-bronze-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a2adcb1a0e27872b5e4d3a1a845ca77690608003cdd25bec42db4a61982dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-rose-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971081b39afd29c32d7a6716ac2150e2a7ec1e30e37f8231b780a3b8c10aa2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk-salmon-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe27eda792ebcf2691e5ec126afc5621fc251584422ed61760dc7a1186c0f99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...