Malicious code in widespread-silver-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a74b73bc1e27ee6849d4920bb75e960426f6475df3aeb20370b99f7be73b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-brown-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f333c93f2b081e0cc7a089aa032ca819d40ef569898b7ccbe7769e77bb19525a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71337 Malicious code in unsightly-gold-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b33bc4d79db5cb884bd14ddba220d2046c42655d7c3fedf0d81092c1aeeea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled-turquoise-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e4ca7f8adf3ade19b9dcb9fefd625f7fa6696b5fe4d56d92e2092c1cb335d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5dce31c2e34c15682e326e0dbc982d7cfab618ac1847be297962ef8f08b6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall-coral-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764234f26ee09e5f80c02e91028ba7f033f7b885891809074172c51e93c9d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special-chocolate-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7e495a976fb539bd244650b41e3076d662453eaa37b013bee84bb7d25fda93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic-apricot-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d445e35e97eaf4e0ed924b9ca863f6f7f83fc3831264de2869759d67bd20f7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcafab38c539e3b8e72422386856d1d1824e6565916301ba5bf9620fa658c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a00a22a5963761ed0d5429b8fbb00dd6a8b38115524fdf1280d5a0d062bfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading-rose-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae151318b61013eff978e6f53c74a713cef756b48d1ed8fd045f5951018d072a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-gold-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f289503f74889a0d2faf63f930f651466bdf73520ee48c8c01dbda93cdb0d64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual-coral-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856eee9d068ad2f981ebe9e28d3bc24a62442f2ffb5341c2b7e61ccfc83a2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-orange-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c681d94454b32eedc345843c9a224d179a8e8d61279f4ece84085a3503b6f21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed-brown-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c124308dde98ea06ce927c7260da20d48553dc54deaaff8e7d00518dfd8b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick-blue-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51833b183cecfb67e44f4954fcc38ce7f3186a497b732fa67f1615ba597052f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide-blush-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45021a943d2b49b5c072debb6291388386dbb69cf56d2fa1f6bb682d2ea69314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late-rose-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a3a49267017ecb787de2667b8ccfd34e0d22633c0246f4998eb4fdfd79d4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...