Malicious code in new-fuchsia-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b523b11ef7c4e06847961e09f52301c51425feb96dbb9ae49e3ea48e6126d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent-brown-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92dbd6087014491104112cf573b4194681ad6f5012eae47f1d3179a460191ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial-jade-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a9cbbb64438caa2f6d0e9f19e76e5983ca2024e067c77ab28d097f34c49256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71111 Malicious code in thin-moccasin-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c6ed0673763327ff5790a48e89e08c43e9605263db05ec72c99606ce84002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68715 Malicious code in hostile-black-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b784381ae56f856fa4ca30252037c9e973c420e8b832b3c04ab4cfaec92aa4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68389 Malicious code in formal-fuchsia-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd95c8a46e6b9c1e56f941e829b4635cd131c24c780f6989a808d6a1e343910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-lavender-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc20b9420ae376b5bfb11c32255e26053c2d4023533968246ebf06b80a38c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore-crimson-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de034b20a6e5ba4a2c6e29bec9c51e42f5440f1b0870ff24a93a60fdab7e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-indigo-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fe5ae50abbfb1e3aa57661be87f140e791b39e674d918527f8008225a5b038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only-aquamarine-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1795dafda0807ea826924644cd2f74f7c9a48f29586d30943ef0c28a353bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66764 Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyeonhau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c827a02789b20087042259dfc2637e7c37b55e9832731d54ff668303ccac3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory-lavender-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daea7c3a376f1fd657482c86f3dfa492571788ae713e6daea507e51c6fa5d83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71585 Malicious code in wild-fuchsia-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50525f3aeb8b5ce069def9394862038de8253150b232510e7b08c8be61b73be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible-coral-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd76c69f6ef92b0cbb6cd4464b0fe19d5af6d69185be829bc0ffeb85ed2a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled-black-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acb36bb16d664f073140631f7275a8f9c18e1f8092248aee667b77e047fe1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight-bronze-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea71d9d4835088800f116ab520a9931b775d9a6802ed21681479dbaaa5bab11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...