Malicious code in original-lavender-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7cff724291031461ab159ba45bb2ac32653ad7f88919277281836ad9fda92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138944 Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139075 Malicious code in thirsty-apricot-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e470e47f2c1db0c752eb315729cb1aaebdcca4a5fe136e905b78ef9ca9f19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable-green-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3312d32f163bef50e05007aec5377a88a01c8ed46223f17c2acae757eebf0295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific-harlequin-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8c570f0355b8e840e96d244c36e23baa6e548a9df27cb96b73cc2756c8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious-white-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d143c2eca61ce2e0df04e00bcc7451f2ed06ad462a352ff7a319eb1195c22ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139022 Malicious code in spare-chocolate-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a627c45b9b21cff9b80758c834e1de92978da4843201f45e2f092cf4d86227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact-salmon-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7044b40d221b50f9cb6b01adeb01cb8e2115df9a991d7040b6ca26a60e4eb610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138677 Malicious code in eastern-amaranth-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d915a045bf2eb60d8439b9e870b610aec56232db06f90092cf835d0c3362757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138882 Malicious code in mutual-black-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12317131eeefab57a8a0ef18143ae04c2c9866ff86e5d5ceca767ab54a9015cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138867 Malicious code in mechanical-amber-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3b81d04b3eec8d7f7df1055c5e60213c983872f9d7c77f0b56a5b93294253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-martabak50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a182902db8c278e43c27de5224b368577251cd870e7179db047a54ff047200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-teh29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221d9fe2fee42b7e3f88fdc3c589fe0f053afabc3bf21c1867b01dde7a9da9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-rendang52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ecbef3c072724da6709b58b740ec5ce5ff82fc090f8fa12b5bbdbcbb9ee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-mangga78-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a0aa3bcdbcf0fdb6a7bf57c5825e8b78852447bd95b31dcd69bf82a5c5b315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spiritual_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391120043faa36d24d035bfa28cad71604ace985a1e17b7e9f052bcdf52a9326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tomat95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4235792b7704c3964acec916f370b87414be31265550e6a7991641d6ba1203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kue98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620a4e4b86a0538193d08940acdf3c867e0f27fa543be47424a33085a3de9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-ongol-ongol67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c7fcb6f0c66e8cd5122ebb73e42dde7493a204c101c3193fc2ab5cac7db0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...