Malicious code in faithful-fuchsia-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a443dec52dd06a5ced591c78c440e4846f79305ac6c4feef5afebffd038ba8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior-gray-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef7b1ed63b8c35bf069d29abb82371034d7820707b99b32c72a50b304037655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-amethyst-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89c60f0a64c927f7c5db2ecf5c98b7d4d36c4af9a373918fefc704cd49fcaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred-yellow-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcfb2ce089fd0f8e55628705f9902c251f41fd3774ed144d06ba1efc5c02881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-teal-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bcd445a3a507659b19a1e581d1e5b77ec6f7cd784f03e2d50dd0aefd4f109f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual-blue-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf80bf02e9e9bd25112d5cee17566ab3477d52faf6469d875784718f1edbe2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming-white-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc167ae0d1214189af8c725bf2eea5d66ac021cb82113e44b20c6be29291e179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy-aquamarine-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f278cf692a01382215ed581f064b588439a2733e52856f09bdf74738604f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69005 Malicious code in jealous-pink-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af975233e1b45f4cc58624b54d559066eecdcc7838f0f1e1cfcd1a77d25eac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67047 Malicious code in brave-green-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b58ad63acab6c201c425758f386bcdf1f5f7fd96a2f0da7496174552962352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70755 Malicious code in specific-fuchsia-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbd57b96144014864808047e3c69cc4d0427ca3067c011dcd33e3045f52946b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67762 Malicious code in diplomatic-maroon-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395e3433b9c2fe3cdc69ece01952861b7a12a9f97fecb15b97aff2ff2136dcd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-red-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb18824cec32ddd54d115953ab455daca543a004ed9400e5561be6f2a2ba16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breezy-beige-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f592d98ff132301fa7da541c7e86beee4fa926b811358f83e2ec3460b45638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting-yellow-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baf605dc0172666767e140b9aff0bd3d89cf7ee0b3d2a5316ead0c32bc4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in choijuw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f0766dbaab973d8db3f42a4793d543a32ec534445d52e435df3ba9bbd456f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound-apricot-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207b915a77bc277c3cb056a018f8e831b781247d45a97b580749d30fc71028c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blusace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed7cce2a7af438e4dc1270f790f4adaa7d78d478c23a4134925aa4ca1a31c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial-amethyst-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab823c0665e8e665adaf1cb76ee640f0a698c76d8ff7b7bbeaadc2a9366cdadd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale-tomato-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af5a4395a55228f60b49a519f5cc020a7bb94cc3e7f0e16c90c99f0ceed93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...