Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic-amber-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fc3cd0aea7fb4c4b0158bde7013cda89657ad97b5787257f0163766755a1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-pink-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d21043bd214a99674e2ee428fec309541a8b9e34aaef4ed5b199324c61ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-fuchsia-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be00cab3bb89018b651ab94919428f46b5fab53fb33ec5b28ae195fab5684c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable-white-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e4f8400943f94f7178fbd29255bf2715718676ef1d57df59da9eb81441e293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-magenta-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605344ec81b17dbb4b0984a15266fa660dbc67a062fc0efa64be6706860ed8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic-coffee-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019c11bef911bfbcb2ba9c4528051821341a05afed569cb701fc779077b54240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-coral-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb67e71fd55f10db222c1ab07efb14b6b78a9f92d11181ab3a612bb3f98123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-chocolate-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea7eb8d7f49b49709a8f8b1ce23027d86e47a00efc4107db02c8fbc24f35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-harlequin-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ede8cc2d5f23e6c27a45b1edab719b3b29678075f8e8aef92f014d7be6294af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-rose-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d542c9913afabdd3067f0e700abf292bb2c8146498c6463dba237779e5fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute-green-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c372766d52d748c66e571b7225cf77172d1fcd0531308b79c3483962e6ef51a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-azure-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926101d7cdab3a580aa8ea8c0fd34596baf09a538a6ca6ab143a73141010693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b32c6a3f358c4252a5fcb7523371d25da02c59293169cc3411d8243df525ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-cyan-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fca3a7b462db2e0c9bdd74555f00f28c29f87cfdc0f55b424281c3bd93ae4ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-jade-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1f2015f8f6f8b4032ce4c8a540e5d1964f480bda042228ef760fa60d4495cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69068 Malicious code in late-rose-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a3a49267017ecb787de2667b8ccfd34e0d22633c0246f4998eb4fdfd79d4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68713 Malicious code in horrible-coral-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd76c69f6ef92b0cbb6cd4464b0fe19d5af6d69185be829bc0ffeb85ed2a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...