Malicious code in oral-chocolate-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7d5b3b8008fe2f146c88283cb0da69dfef3e21a431c7dfd4f8ed38920e398f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting-jade-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b892cedde59ff8f1a93d3f24fd974d74a060c3d1c30e34fc9c4b95a2e8755cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chsiantur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a87760f6c9e18bf4012259382f27f27d5fe26b91e1109ec22792c5cf42bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive-blue-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3d8e8f8c44e4a98eafebf1d8f81f9b70b9734d786b27d93150aa3e8a4a1043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-scarlet-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6820f8530518ecbe2232340151d6f5c0ce5b10a76484d3f7a1ed88629868c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional-lime-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197fceeb751f1f5379e3c8066475620e6b5284b497e91a28ee3def54a7481552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-indigo-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c8d981e9ed1a914db55525745bb94c61b549572d807062e6646785e37de295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close-aqua-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb20ccfc23a2a72b3beb6dd610fcbfcbfeca870995f12b64263565de03fc2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-scarlet-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57d514d4e0618108b1fa25c617582555054e9b39c37942ff52d3dab094abc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8021bc028659f460cf303cbb57879efe8a03c5305fac5e0e863656863ed3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekdayy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df956119036e407b8a96a30e171e0ced3fe42699b074b8117b71a5d9bd97d78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69340 Malicious code in meaningful-magenta-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfb8f5b4edb06fc6ced5ae9d3d3f2de1f0a5d3e231f1f31ec3d5f54c37e2c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-red-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b99bca911f9c10da4efe6ef0feccd31ff9514dc19d2225f3aa1c92dc95ed125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1204eba7cafa0e4a5fba8172b6d99e52a6665814665456d648b7f9cf723361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude-purple-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60a0bc8b1712f30522db9349157ff1b7938d01ff3d45324659106d41be5a311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-rose-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open-olive-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0417f054dfd26e6ee5edd92d20a8e2aaac03f66f2ed03012e8435d19d0ee05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar-chocolate-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c949266125c77f21e20a48a1b5432677b17e8c8475aa4bd7d3ade41490a236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double-white-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ee54e34234a6ea3fc8cf485967ded4454dbdd0283361708d12c13966936a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...