Malicious code in comparable-purple-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb2e700d404a88b007174f866cb68b2430d139e2e414da16f2b386e53a16bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hieuil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67eadbeba75e1135e2ab9236e48fea0a4e93682441de3461cd59e1c06c006fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excalibarx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5432f48f86ed6741ee63abe7aec152cc2be52fb010f7339e0e8bd5ef3021f711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge-indigo-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cceb1cf33c4e10b41ece9cd8bb1cc8f519cf11d39748ce253dbff5736e35809e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial-lavender-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb33e28382c11634f1e98e9a4e3f265dff42fca7d9a96ed95f94483c202e495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational-salmon-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76038228a7193621c1c5683edb6658af7d3c22fd56e2a991906fc33c8468daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few-orange-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b1c8c3eecab41b696b86851346ecfac37e182f047f9bfc77c977d371e2f587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent-copper-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d68ae95ea1015f5a3297c6a7640d84219522fbc148131833d1125dc1896f4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right-black-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d93e95d5bfe44016dcb7d0608937ab66981ccc2aef52487d0696950ff1da99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous-rose-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3381e276f758696642d866fdb4a7cc965371ecaf875f5040896ac2be262e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven-cyan-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f116fecd17841736acb95c2dd667d625c20349f8bb094d5bf6debe3d43760bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-copper-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c4b63883ccb709694df00325e9d5182362c77e2eca8efbc0dd2ddc84e32ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy-gold-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e815b3e92484115c2e4a37decb34b906a9e92c2b5237930ad6b9385ee2702243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e7d433927058e89b625011173b651f49b00420c6ab3784c5548eac5ba84b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical-chocolate-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12c6e61b3488cb19b1fdab831169847a278bcf122bc35fe87a37b9eca9e23e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70500 Malicious code in secret-chocolate-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d7bf5dcebb64a8d8783f6a1867987ed01f14577ada5e5c129f3c8bfd3e25fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-coral-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe79fee1442224d1cdfe1f703fb417ed93335d0c2288732ec83a64173fd1acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united-maroon-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1280642689393e13dd5981428b4c0b46f7605d9eedc9a9ef26f5847946e9507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...