Malicious code in olympic-cyan-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913eadcfd6246ff49a66ba9aac2284e091a190a85730e3aad1998a50237846bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amethyst-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3e38ec60386ac0affb0bc8f16e477e54815b2c19f87e8c29dc4cd00a44ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-amethyst-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc41adc4b88f86783414b015f2d078ab908b75c78ea7e977bb3262f6f47a3322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute-harlequin-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7142521577886a8b0b30edc01827c717e23a7b1708c42890552f3a45c24cb6fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-lavender-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc20b9420ae376b5bfb11c32255e26053c2d4023533968246ebf06b80a38c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy-gray-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7927553b66ff1c48a380f5c3979a21b521ca7d9f1a0a31d33f8b232659320730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty-silver-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000a3b95f2339aa52cd421495c03f3fb88534c35ff71574a3955f0ff3632c32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intellectual-ivory-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eaa6ed938ed9c158605794b2cf92db78199539297c5bae90f5db0298437b8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drewtayga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ccd5216f1a65f56f2ecdb2df00d5cf71a2066e234cb4857ff9fdbd8359d7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical-olive-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5740a603bdefb14793be521ad7fc814f7eba3d77a52fc3fa4a9fd4e131771651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal-coffee-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3b53100e68addd2ad29b62ffc17e9659e8be96020478252a6d2a50e929af94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xatashzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a21fa75335616fe33d30bcce5bfe6f52297ffb7b971adf214075e315d0b0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d420ab563d2cae056e32cbff56b7003246fd8131451a8c48ae50db4af0ec9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-silver-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138babd2e9dc479d5d7b853045d1d3a8129be15e4f824d3794f26a79e5228fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay-amber-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d618a1e8b5b0b5a380fedc12f29c5a6a1a35e4196a2c4c736ec06a07c2a976b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compulsory-peach-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d7fa32ccacedc188b20b1845c9a223fbca632aab397e19e83210d64eb2a10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy-cyan-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cc228295afdc4130186ceef03ad021084b0214b1faeff79cbce1c09602160b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69757 Malicious code in original-gold-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72743afea14a8fdcaeea05d149201c7be371c9b0baa8157c1dd64b75d757169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very-copper-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ad46de82c1061354c3d4eb5c5af6eca98a158775db15f8ff4193b00523311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-bronze-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50e1faff0fb22820947b556dac9563e6b3da3d245a96213b6c4d7580438a560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...