Malicious code in genetic-aqua-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7228b48ce2323d35a74614638bf6644a42e50e30c25160d5b32a179f4073a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138832 Malicious code in lengthy-tan-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b02340b5f5a18bb4e997b746207911386488b2d4c1eec42155d7a954bcca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139090 Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-red-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485341fe5f2687e3dce686debb22e9becfdd35617ce35f8827e4ff1de2009f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-jade-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579714306228154cf3109f2a3d285fccbc11425974d58c8bf2abbd4c41d458f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight-blush-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e988f3ffe2e015e75115acdd537cf61ab0a22c6fe7654f5704c784a3ed9b8a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6807c8de7271a95357be7c721520fca20952d774e11852cccd1a10c20c13f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-gembus74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07f8e5f5678b757f4d3ba47bc7df942e5ba9cb903728c793f1f8cdcc27ecc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca62840302d8b082c4b5224813d1925b967016a33bfef4df1f915977bc494c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143319c283d109d52d2a33f42f17b2876027e9cd7b2cef5ce20654e7e78ba425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-klanting24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c818576f3111b2ae4810b2f9d1794b2a88e9664e61fcddd29e0ec765245c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-dradag30-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c760aa1350f8126b68c91a60f2bbca89cbacbdaa6f3b0099c79a097b598b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-jamblang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e95570297db8dc9188ff6ed0ddaaf78ba6fe8e58e2cd24bf8c2baf1e2426e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-rojak99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416ab570f10e66ec4190cbf7561a1c347ca208e8849052f98a8cd828d4a83bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tumis97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc3c96cca870361f2e522f3bec9db4ece2cd70b818c499816d89d3667f99529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gulai42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ada8c24dcce20c18216d290a12938a56806212aadc93f191e90583ff127e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-dradag82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def676e1820aa4350dacecdbfd0ba80a9cf10777815f976f9a7a553cfa7e71e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5281ef3f79c85dc0f48fc017fa2f8e7168dd96e22500eea958dae9af1b76cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-asinan68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11e63c70824e49b780c5c4ceeca30675d7d98e6bbed9d9501831a9d0508648e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...