Malicious code in continuous-turquoise-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfcf6ab9828297610f4e013987507c659b5b0e3ecc6c6fc6b17045acc6f0cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-sapphire-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f6b019f45fc95dc00d8d7b386d771474b9a02118369056eb237de00e61e1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost-turquoise-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b11e199d9eca893ccc990d803fa51b597d94e9c4ffe398694bf0a9c9ac5f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb58c3e80a26666679d6185704ce2125ea199ad4d24a56a4a6aef870c4f127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous-tan-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0d95ed24a0bfbd87441fa199db1ce78886b590e7fe03453bac0a28090b1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar-olive-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e505b05a1e202f10660f04449288544378bb565b3771b5da794e0e7413ea5000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-coral-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb67e71fd55f10db222c1ab07efb14b6b78a9f92d11181ab3a612bb3f98123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67014 Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-lavender-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a49d7824829ccbcec70709427acac77d9eff0800942d1fde35d0872bc00fdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal-ivory-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a9e5deabff69c9a9262821c6c3f0988d61035429ea896d7abb75e0bd39d7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-lime-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611255abbdb401769fe4735aa9b433d2a53a4ba84154447eec666d2a4ebb8b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory-purple-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d1b03182ae210c473438e4a7306662d33412fd22f735e7d495508383cf1315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-pink-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d21043bd214a99674e2ee428fec309541a8b9e34aaef4ed5b199324c61ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected-tomato-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c818ef8c96f71b5bd5f5e247edb25ca30cbff584daa0107d3a581eb908e924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-harlequin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b091a8e5186ab96b4f634e39f3b871adb5fb57766704d1195ccf70b8a3a517f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-azure-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926101d7cdab3a580aa8ea8c0fd34596baf09a538a6ca6ab143a73141010693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-amber-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2971f8f8fcbabec9ae41313952e3b1c568585a43272c7ef6bccdeffc81b4c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...