Malicious code in underground-coral-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcee1172210f6b588a3facf65efe24a4d4e96f893963b708e593726c01ba5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-indigo-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8e7a201f4746a36f06d37bd0df90483327476b3c7d0e56ffd23f629dff2da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest-amber-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200608b18e01a83410b49df32c1bc4d510ffff46098bdb42abe9e887a4a6e118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-ivory-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3d8824a6923369e54e669ab24fe02a7eb3453cd5493f963db538d0efa37edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary-purple-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92541f2176da2ef52e94f099795f720d65ef1a5f8610e7804b0e6a5e809b610c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall-teal-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed22e164e9c20139d8e782919f599f27f26200d8cf023d87d2500dd41d85c0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal-amethyst-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fd7d22fd794d7da9546a8ffb3d4e6f09a6a7862e5fa65d409a937f456704ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western-plum-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eae487bbd398b0598f6abbb8ea61c4513d2e483aa1f77be36f64791d55e85ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-rose-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d542c9913afabdd3067f0e700abf292bb2c8146498c6463dba237779e5fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved-sapphire-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ef6e2dae3d911bf2b949143b34e5a64d491bfcd90f37e50d122c5bda69a648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content-magenta-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ee92f8bdb2d9e916825d74839e3dfd2f42e2e85936903e9f2b642c22a68298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible-amaranth-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3089ac9b806029416d35e7fe09c3ecfce49d0567ac83709e0b22a42d0dfe561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical-purple-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e434b90adb4dbca10ea3c44576ac6f709d282d0d590f754edbc63d4d968435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast-gold-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8b353bf386c8a02ff71dad5f263e5d567d080ba6860463056d6d703389f0ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67539 Malicious code in criminal-aqua-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab92c0dcc660a4397b309589c23fcdac382eaf542741973537e39a51e9f05b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70851 Malicious code in still-turquoise-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ba7299ad60faabc5b54333d1a9fdaf5f0d7fc7f12dd3d5f8eefbb47d02e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...