Malicious code in masvusgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ac5f9f49a4997945eb81f3544c2b728b1f334baa3bc41dc20bcd74bf800a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moonmooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a07e15a119c31a9846d824ffe4ad9d996e2b78aaad96a1fee8e0afc4fb557f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69488 Malicious code in motionless-yellow-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94108fba18e6667c74440fffb0f5ba5dd334ca97bdcbff02fa64eec5bb4818d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70467 Malicious code in satisfied-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24e6355364ffbf14c639da3d3ab95928e6a0167704f22fd63935c74076a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67269 Malicious code in cold-salmon-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a821e608160cb4c5b516391a3963900f8884b5b849cba50002d4ae14a481919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71694 Malicious code in yammering-moccasin-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507055da7c75abc3337777fcf537b30ddebb53f40607feea85dbb9030066399d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70553 Malicious code in shaggy-amethyst-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9f5e6a0b359ea99372ab32a99dbf278597cd3fee23952f57eb6caea52fcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69231 Malicious code in loyal-plum-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65f718b4a25b7db41dd144c43bafaca01faaef0b998274b8a210d5485c6b106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66830 Malicious code in architectural-coffee-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9548be6b7e78cf127c261f8cec416efdf671117f2c52fa1261fc4e63731ff5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68783 Malicious code in illegal-silver-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b544b2b20b0860cd4a305b941f4b8631675f5e947f73b8a191d41cec5127b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-lavender-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89b456cd94e5833aeccd8fba474787143f53192382517e1040f22997c0967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living-emerald-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4057aa20b1b48a8d274029c34822eab70d491c684c98e7ecf21c4dffb3fa5561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71239 Malicious code in unchanged-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac9f6914f933b76e152088b94448fe2f33b87f806ab67acc80a6ab790ebb859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70267 Malicious code in regulatory-fuchsia-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2042aa54307128c903d87d2f038cab374b5df3bf6fda5c1e69c22106c4faa8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71369 Malicious code in used-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13832c023176c909e82d8a1b702913d04e85d74ff41eb984c70147e081c5bfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66568 Malicious code in @bipyruss/yrinth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e89412f99bfe0d1d736f714067a05bcb984f10eeb64c0c31ee4d0c40810170b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69601 Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-lavender-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bb821481b582ce7e85ec94e08a8ca0bf3b8d703c1815873b6a1d70f8042ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1719c0afb6f9683434f5f9bf17ee5ba0cd20d4ba4420ae18a18800195861d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-sapphire-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e2a6138e7dc543d3d60e75715fba2864f2b4997e17120a6a4ea39bfedba57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...