Malicious code in possible-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e42f7bb2da584bb623dcfe3deb3d494474369a7511cc67c356e3647c5c6c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy-crimson-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c72ee236a89fd80832a38ac814cf8e4f8c2a3f4277c7aff3a0af2cc68386a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly-fuchsia-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aef1df003ec4fc2ffb0c9b61c6032f27a58e03dca395481210453e93309853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70896 Malicious code in structural-maroon-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f3f80213b2a5d415b6a95a93c166edd18f8ef8afa677448b349648174126ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66755 Malicious code in alternative-salmon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ea7a48712e7659e37c8c0fed2970990a212875866f0b3e418cde7fcf18c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint-blue-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d68d8481d94abda1c3fca2a475504b1bd8cc9356116e042c22f27a91a0edaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291f0573a7944df5799ab3f9d6a3cfa62253779e4de8dd021611b2a932118761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in realistic-sapphire-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1704530b86d449d8f4728e50720cfc4a7ead5b0bf214bf67a05056780feabafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive-harlequin-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28ab96560978ece7800a09adfa1abc42662f736a969b03afab3e03fc52beaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf993bc186af8ace13c4c7fa0b58e3ebfa8bb8f4008322a4384297f382171e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated-ivory-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c9ca5f56f46c716f1ca32cfdfa56b8def0bbf8fc20569ab2a1175dae574dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent-ivory-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34daa4b911876f9c7b1c003a475e0b603251248f4c115aa2904919d87b49079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet-apricot-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0bb683851eab186e7c999a364b33aaaac84b69dcf93868896b80eff34ffe01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7b7af17b7b59d66edaadd9aa13195e7886b7e23905dc09eda5ccc360d2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-cyan-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca9721d9803ea2e130a37a3e3124aa8d77988825955f4fabc0b856d6adbe441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent-lime-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51480f10b16f3f0f58ede543719656dc84ff69be60845a9169c337ca5406f7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful-magenta-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef476b7b639120dd8700b41ca86f8b8a77b0a2fa04d7baeeff98ee7e898b62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely-ivory-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ba56827bdefd4e0f90cb4ce0233dc28a36a5cdfd7c7df385cc2ac96871dae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent-harlequin-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b371d8ea114f05f5ea58089d0b9c5d42193425c6d6c1a3223c930045ba39b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...