Malicious code in afraid-emerald-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2342adc95404f1fdd5607c8ef5e9e7c10fe7f2b5b1521f75bc3054fa9af5bfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-peach-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9e2f18d00ae24c8afc4cf759851c2db5a2d1c1a8dd3414fc4bae88a73e6fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close-apricot-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d421b61fdfc98723e93dd39ac5fdf28fc283cd4492a447460082570174ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-rose-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a486998b80948e010817fdc7e3c5ad31fb7acfe6695ec6ed3eb6a13b896d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e1e8105e1db8b3ed50b4f45e23375c6da38b48f8276e77502d4e388af39c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual-turquoise-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5656eb44aaa094427fcb494a122ef8efcb1557b55a785ccff22de593838a76fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicchorus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8460f6b43d86f03464e625947ba79aff3a81809b3372cf750f8ff3cdb833c58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-moccasin-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98773a78cd4b85e74c3503f37d4182440027f01241391b3c10f8551cf924dce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-blush-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b1d420b919eccc418aed707642aa04cdc98bb021e8b10fbd76a621e9b1e562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody-amaranth-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bcef0009bf96f20fba0807862ed7e68e6cedb85ecdc312159f9a9cca5d465b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated-black-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4b142266ca5e0412a431e55ebc9e0254c4534dbd08a209eb74e75a24a631be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-silver-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabca3d24ef9893dd9ac2ebe28868486b3b7034b53f67af1a41400f4c3cd859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous-crimson-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928385e6bc206c1210f77eee5d94b35c9fb4a4033210b0acf5f4c68bb0e18e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady-yellow-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9018b11d024cfc31360f40cdbc772401d09176953b124ccf887d966b7276f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial-silver-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbe18aecb0cf92360defa06b3e836c99505f92e11514c5bd9e54b6da552b6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible-tomato-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7268b093a2d3489cfb805c8c68cc938c72b8ad52860b06c8dbac0868e9624fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying-moccasin-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dd18461d8be2110e18768c5f5ad74fc90e5c31137fb88dcec47a9b0734380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor-violet-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbd919d4fbf6a7385c44246be3bf409d5b46e045e9a2b637634943b16d4f424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69859 Malicious code in peculiar-rose-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8942e3c365695bac2fa1414374723f7024d3fec91ca529501820bd1ffb1576ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...