Malicious code in @bipyruss/bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd1ab3b131030644d495da62cd912628c876e2afbcb31d1fbb4cb56d5b2bdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top-yellow-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c377d19d27521e4dc0c083d30f73aa6b5f83497cbcae5b66a72cc500ba58c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain-turquoise-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1869506b7dd4e94aabb4ee487f2edc20c7a89f3df5eb19d7a481db4401e39ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-salmon-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f852fe0c7b047e54f22549ea6098cd0598526485f61f59b6416a04c079f9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome-sapphire-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988195d3d8a1fde62ee7fd53cf1673a85bcf5fc56456c05e6844e17571b7de2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-olive-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e975eb1ebeb31a56ce0cb074c6bb45aef498c7fd8942916e743ff604551a5e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely-fuchsia-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6837a60dddca4b89a59a172b5c6875280cfbba7f7268a1f9898a3380d4434407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious-gray-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4816b5c799df33fd60bcac81b693b631c4f1e71db181eb2442f5fd122f20feba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive-scarlet-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4803120d621ccaaeb1c27d657cfa0839a69e6d98f113b92821a0022c8cc9948e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light-fuchsia-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fc5ddbdd1e65996987752c0c4362895416231d351900af4b22a37207961cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anxious-magenta-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724ee7c63b182cb6b0c626594755d6cea5357271e1675e11889ec139ebe12674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yodelling-blue-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ffc74789697507b76fd56549cc47cc4f40a37b4ee9e84039091c8efae233b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-pink-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30122635d2626829b465fca4f4a2d90347ca9dcb07fe7f781794a617e09bc084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average-orange-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0954fba9bd267a513ecb8080374cab3f013d749aae05677c8ed0344fc95ef627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nakajio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b3e418efa6d722ebd2fbb14e98f45494bb15da905ec813fbddcac9bd57db85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amaranth-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1294a944e54ed5aa67c36b18af359324b140f69b8f411f1fea3d3aae1f03f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable-jade-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80af9c5c6a7e7189435cadbb92cb73d26676e257c873dd4700593b0ba02d8f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71772 Malicious code in zeroth-pink-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f86afaa6f6bb8a17c8893beb0f3f93ee604dbe9dfec6dab22673c6cc822be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67009 Malicious code in blushing-aqua-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d938324acedd4726c66308424ba3ad390f1c4cf8213effaeebeb9722e76b284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...