Malicious code in aggregate-moccasin-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51838c4420bbc425598253239486823d2251e8299ee48b3f77ee8de03b2557e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic-aqua-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7228b48ce2323d35a74614638bf6644a42e50e30c25160d5b32a179f4073a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138832 Malicious code in lengthy-tan-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b02340b5f5a18bb4e997b746207911386488b2d4c1eec42155d7a954bcca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-jade-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579714306228154cf3109f2a3d285fccbc11425974d58c8bf2abbd4c41d458f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight-blush-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e988f3ffe2e015e75115acdd537cf61ab0a22c6fe7654f5704c784a3ed9b8a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-red-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485341fe5f2687e3dce686debb22e9becfdd35617ce35f8827e4ff1de2009f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6807c8de7271a95357be7c721520fca20952d774e11852cccd1a10c20c13f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-otak-otak30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74988b4b9a5b42ce633478f41fa7481c2903044060b90b0879bc8a18fa7f8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-jamblang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e95570297db8dc9188ff6ed0ddaaf78ba6fe8e58e2cd24bf8c2baf1e2426e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-gembus74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07f8e5f5678b757f4d3ba47bc7df942e5ba9cb903728c793f1f8cdcc27ecc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kentang77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a654dc15415b9f7b0ea946bbfa974e1527a50e18fbe6f586c9084aa287b325eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-mangga63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c15b4e0a0e23538706ee49af24b557ee24aebf17f8b9423e5908794fc42d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foolish_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b17659fe576eec62577335d62437af8fff99deb804ba5da761d14aa3785bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-ketoprak20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129c48d34b400981ec84efe94d62b11e14b4ab514a9cbcf00646d135a6291f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-saguer94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcf719e387f9e4311885d1bbc11351805efe0cb6d51a525b9b3e9c5edea0cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-getuk29-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f29ea701860715898e817f611a10e4f6432714f44484a79dc8c4ad3b5791ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d80cc746e4b76de3a208cf6d57ec9d7769ed6292e10938f9ed7f73a998aa353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-rujaksoto77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72b35ba72c5fdfaa1eb26a140a646ed6f21f1048b919d477c5a4b384178e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-rojak99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416ab570f10e66ec4190cbf7561a1c347ca208e8849052f98a8cd828d4a83bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...