Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-salmon-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca9e3154061e65e59397c2c22e3fa9f87ba126a97e979ecede3258c4166596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic-azure-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edea10169803888703d73cfa23200e88b15373a3dbd18b239bf49fac50a39c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superb-aqua-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e89b8c43616e16c5bbefacba13115d0ee832127f288a3f7663f97886c21ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-tan-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3591892a613e88cc7c5efd8557f476cc0a784eb13ff59e7d8332cdeb17ef951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectacular-azure-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb1e1fbbba7f878cd50573fb7c22a15023dbf7a797b0c9ace9fbd7500a1e8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant-fuchsia-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26d98847cb88065c9bd3145efb5221682bc8ce7e0457d51df25c26bc7920d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-harlequin-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387bb00bb1f855b2251f68befac3df1e9861745d83b87d91db9950be633ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie-cyan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6acb4888c9f675f5b4c5b83fba44f370e8deccf1e1ae5f15ce0db00e99a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-magenta-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1c1389dd784f940f0a09c1146d8f1e760d0540bc09017cd9d7f8da034bb5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-apricot-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d62bed01605d4bb7bd7be840d37c28461a0fc640c533e0eb74c2f333eddaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-purple-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d4b82bd4a4f085bd2bbe4a81e4a10edfc4949ad1f71bfbbc4f18ceb83463b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-lavender-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9281ba5d27e75ea0a077a2a1957518f8fd3cdcee4945eab4b5ccbb558a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138993 Malicious code in scornful-jade-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579714306228154cf3109f2a3d285fccbc11425974d58c8bf2abbd4c41d458f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139024 Malicious code in sparkling-scarlet-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130fa73116bf0363dbecf9a3c9d04adad4232037eb140362b50f2c64c007fef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138624 Malicious code in communist-purple-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f27177d9140d4433ce03a1e7070d23c9ca65d046bc433adc7b68a2acdbd114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138777 Malicious code in holy-aqua-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ae4df8a9f707910bba3600a9c4c168073fe696781efd8629e71a5a19e63c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-silver-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa82b813c7e2f7ff59f68cfbde294487ed049675eeee4ba335438e9bff54088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent-plum-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...