Malicious code in magnetic-gold-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869148705d3b12cb5c667a354ad4e4bc63a03e0121612a3e8e369f98691e4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable-gold-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82371942ad3ef0ebde2ce108d883a379f4e213c7491db54b20623e3d3ab93881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official-pink-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5000e62f06106ab11742d94e64d45a09a2614570a774a4e9ca73c455ac0d1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-apricot-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ed73874c57f97bc2fe6e241407ee819096d4967cb8fea7819493ebad514d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome-scarlet-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58905e8c44e490c1d78a2ad156372e66dda01891ce9e7d0d29a24d050a9d3078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform-amber-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7344771a2affd254f34742a2540a961b85c828d8fcf31682b76987917e408688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-aquamarine-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d14b86f91d72efb01e4b5215475d5a53c8d1f01b953e6bef345063d7339339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin-aquamarine-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a20afc405cdfe6673847f7792aeb3e4c51c8194f414acef3786a5d74fbbccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable-turquoise-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49817fd42aa1b0250b1f67928d31cf5c034d49f4caf133b1bac6e5b05217ee7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected-harlequin-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ef8650b1d9a67bbbf0c528f647bcc2450f95ea776b677aa1d6d9bb032a000c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic-brown-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09644eb5056abf45b687d17181ba94df4cf0d0ae6b8b6c66d65529e6d540b126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-turquoise-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541afebd01471651746bb5347128897b6e119e38f481ac4c3d48b5238526f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f848b2d6ada58a0fc49d9c9a07c5f7cda5d384e040db17689bf8be37a2a77ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near-rose-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc42bb732ab33de9de4e60010ed2f863080e2ae022367345e2dfec5b0e438742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban-amethyst-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9c293793b422fe36c0be94cc958a24b61003ec5768b3ea694b70238404b1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-violet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22ce9f3e331de55d5e56b36cb03d4947cca10426c7730ca4bf74917311db80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious-black-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6775f2f96fd0cdb9c76488da3896123cf7466e8d7399577ba71cd9b23b624b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69560 Malicious code in naut11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809d2d5f9fca56b60d196e6b1e05df17f7786a48f4e09465da77ad3444271a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely-coral-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505398836fc6833be1b6f4768a346df025426b185b1d434892f142cc84f8ef91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...