Malicious code in xingyun69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34cd3f36fca407da1cf325e7afedafaaf12f8a3f888ca9a7bcc9e791076228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yodelling-plum-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c03d678403fd871a5ac204f1d2fcd78275fbded92d3aceea99abe3cb950024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8320738baead6af2bf10b6bfd6c36b7532e84f595b033ea209136bcdae8b1d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content-ivory-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5a59f0bd2305df66d3963856828cedbdfd7718ecf5e38a39b29b377ab61570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor-violet-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbd919d4fbf6a7385c44246be3bf409d5b46e045e9a2b637634943b16d4f424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational-aqua-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b618557eb29f4ff29d11d32b9388398df1b9fc1a54c4d62483b457cc37273c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible-tomato-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7268b093a2d3489cfb805c8c68cc938c72b8ad52860b06c8dbac0868e9624fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-silver-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc77ca8a118fbec40600961002428c803c6f635da56982b445c71a91f1a11bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate-harlequin-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2844eacc920d38e438e1b9ab6f51f0f12efd2d74e301bb22b7af98d601d5f3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected-beige-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d698fad21e2ffddc32ff28637ba51b451d753a4f506754b49edaba5fc6ef97f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady-yellow-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9018b11d024cfc31360f40cdbc772401d09176953b124ccf887d966b7276f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square-coral-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02e84e88ab5326f140d99310d7e5784957b78cceda076b61251429d444befa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-amethyst-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96e482b4d6b7a93595afbad1fbd56cb97264b8bb09a9158139f2b343fbf1efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial-silver-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbe18aecb0cf92360defa06b3e836c99505f92e11514c5bd9e54b6da552b6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce-red-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41377cedbb03159aebc917b253b8536590e34941344958b680d38668d1a4c327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying-moccasin-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dd18461d8be2110e18768c5f5ad74fc90e5c31137fb88dcec47a9b0734380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-silver-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabca3d24ef9893dd9ac2ebe28868486b3b7034b53f67af1a41400f4c3cd859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70479 Malicious code in scattered-peach-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b200e1a6b1f519dc3fc5e11b8a8603d69d5acdb796eb85ca368e28e1a9be895c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71154 Malicious code in tory-crimson-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca4922998183fa450915085f19df4aefd583060164bc2a4bc4826ef23fd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...