Malicious code in light-fuchsia-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fc5ddbdd1e65996987752c0c4362895416231d351900af4b22a37207961cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable-jade-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80af9c5c6a7e7189435cadbb92cb73d26676e257c873dd4700593b0ba02d8f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky-indigo-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf398f677bd6b5b67694d38c9552e89c5d027e6e51f99ea1da826d96863f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content-ivory-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5a59f0bd2305df66d3963856828cedbdfd7718ecf5e38a39b29b377ab61570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close-apricot-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d421b61fdfc98723e93dd39ac5fdf28fc283cd4492a447460082570174ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven-azure-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461933f84a4d2495898e76886ea2ec8343a4fd4bab3b9998fa03e1cd94b49d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic-gold-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ead1f36f6e54ec7ea92506786df8899e9028cef25f59e83a39ea79b564d02fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square-coral-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02e84e88ab5326f140d99310d7e5784957b78cceda076b61251429d444befa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyeonhau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c827a02789b20087042259dfc2637e7c37b55e9832731d54ff668303ccac3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71619 Malicious code in wonderful-sapphire-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c9f3b858a06ae20f77ea6a549e2eb15f882c96b1d4db684f2390c3efbaf05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67965 Malicious code in elated-aquamarine-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69fa25b6ccd3f1a969f2a40cff68692c0d4cd09a1711f5c82c3838d3f0c286b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69153 Malicious code in likely-brown-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b70e58c93cd325a4d1b1bceece71b074cca507ddd28eef86b8ceea0db4c23ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70854 Malicious code in stingy-copper-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821ec40a719bf627d271c591bbc0157a49284d5e08b82da3748732e444a913c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67280 Malicious code in colonial-indigo-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36c034c6cad0747287bff3e14665e7df786656d927fea9df764bda091717288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69642 Malicious code in notable-lavender-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8587e820bae58cac07378fd31d0929388c683d313d7fb98efda4a6bb552094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive-black-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe39284710694ec5c5188692566b906383dbb5451c29c6aa18f90623a7e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...