Malicious code in surprising-salmon-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a05c7e6f5b0389b624ef0af5f621190f9f72f54b9c490f49e3924f0edc24f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-blue-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e681c24a2be4b09b2fb0f2791eb67b5c7cff96e2f60ea720c9ff4a2670efa560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory-coffee-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452ef6c46a3f79bf07cd11839b275f918df52ea9ab673670f42d3fb57242dfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total-coffee-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd1c1d6e2fca9efb9b05550bd0f88fbb619cca53db38211f406a3308b24a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70668 Malicious code in slim-plum-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e570edf098ff4ff8ba812c1c9b406057e1ea61acf5529d436fb67df83c70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary-jade-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af75f2f4fe3b4848595747b0fd09c80855a2d9922ba00cf8fc177efb5a1cb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy-jade-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a5547d211698db23721e0e4ff542891245c289a45f626652394dfdf99e6644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9caed1b88207ca4314151a8adcc7de9b64a987e8d4f59457306e28327484ff3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kepok17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f015022c9f4d937b23dc6e372c96b5e1e4aef8a78c6aeb5395d02ac4cdab5fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7738e9b091bb6b4d81e832e3969eeb335a8bab1d7e939b6248cd7d174626edeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tahutek45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b54b78c402ca082e8148d2576270a36e11986d7f6ca695e81674a9913b2ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-klanting87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9908248bc79e59a8822fec70e8079e7264db91ddbc51b13c92dbc3f447685de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-sambel38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1594c884616a9355364c1887747f18cf523a831728f4440a4c0da58113fb4c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tomat90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065aca833effdb75cc19fb774f5b98abb70d448c0f0c5f11b7ed0946d24819f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-oblok12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0a684dab349ad74caf872cfe6a2ce538fa2d72a5931e8c344d3fbe812ec0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-soto26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38bbbcee6cdd3b5906061b98c86857b2dbaefe53d165d7d4407a395cbd643d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-soto91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850ef90a3e5f7963ad54ae3840a34d5525defa342ca12391ae81cc4e5e474bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-bakwan6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bc7fbbe83da72cf4b64d4d8a94c7d48ccd1df98606bbb24885d6a7018b85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-takokak51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bef42040dbfcd5f44cea589137c083be040d6ca78f02b317b269a935ba50189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ragi5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a9790685bed7b50a6cf6b853404685a8c5a2fd9fba15169d41e67b15d8e1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...