Malicious code in necessary-rose-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941da22e570bb4ece2c41326970134a0091f10af69c955913f6d2cd04696cc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-tomato-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e177509a34221db84e2de957e265c63eecdf467fbd4afefea2d4ad30bf2659af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent-purple-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b48ed2a9fb10cdea6c195d89f547236e68a613b0a14d5bff04e0c6752700815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied-red-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75cb27e4393b6d32b1dae2a5b63ca40e777ffe92cff841cd7cb3fdbe1dbbda4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-tan-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660c0e994394f1e75c0a1fcc8dea6a9b594c7d419cba759a45312c9193691fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy-tan-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1d14821eae2cc270a167f7bcf225eda72a84e235776f7fbdf1cb162b36d412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe-yellow-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ced9058cc261e240ed8a0706d7025f323dbbcb856ec5600903fa5910215f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic-silver-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05af4b90223b9d68bc2132ecac020889c9f11386c5c4c693912cc7465c4cdcf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool-aqua-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af95dffe81788310f78c8074f6046704c1d0f294e76ddf93f698476b686039c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69314 Malicious code in marvellous-blue-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0689dfbf8f9fab7e7d3efda817e3ab3c6e899b9630bfc64e57b39318404c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70953 Malicious code in sunny-peach-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e4a62860b53b5aeb24a37a32f77bf6631e9245b46c8f3d5524f3e7d1d5e15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70235 Malicious code in recent-scarlet-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025654e8799a1bbec9d79b28d17bc415e66ef5bf97916d233b2fcf5e374c9583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66567 Malicious code in @bipyruss/vividvortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabea9f0d2062dd16b78433800d3c5c4f91e4569aa1947f2a6d042e1868d59df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66707 Malicious code in agreeable-magenta-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbbe43cb2baeea5965e26d2a22c285a62491851a10698c44b7f40ea4092be65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative-silver-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458bd1e9bd80748871df565709d15bbc7067bd00aa949e954887475e903cb0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-fuchsia-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be00cab3bb89018b651ab94919428f46b5fab53fb33ec5b28ae195fab5684c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fascinating-blush-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce75a19e1b6f33f1b763653229c8ea79dcfec2ebe7e28475b4077043f3fe0108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking-copper-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb7508ea8ee8df7ac6e0a74e149feb1770aadd65f095664513108beb43b1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...