Malicious code in legitimate-chocolate-hummingbird (npm)

Source: amazon-inspector 8d47e9c91fe338cda2a43a7620bbab83213ce473069986aee025e487cd3033c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in legislative-chocolate-mastodon (npm)

Source: amazon-inspector 9b09905b97b3c436575752484fb9798270ba21dd29f4b33b5a598f3df24c3bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in left-chocolate-canidae (npm)

Source: amazon-inspector e4266c53a070f62e5f17159b2eb674432fd85587c83a286f4c5420bbc2c6169a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview leading-chocolate-roadrunner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in leading-chocolate-roadrunner (npm)

Source: amazon-inspector 8d572ac374f059d6e27914bfdbee76b3982214424c0e27ac7492f241bf3cceb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juicy-chocolate-loon (npm)

Source: amazon-inspector 6fd7d68dcbe7aa9c9413536ba4db6b4d277c3f12308374cfcbdbc31d0fe561e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jittery-chocolate-hoverfly (npm)

--- Credit: OpenSSF source...

Malicious code in interior-chocolate-chickadee (npm)

Source: amazon-inspector c8b63396d06e20fd598cecdef9224194216f88742e716712ec4ab2e9927606d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in influential-chocolate-jellyfish (npm)

Source: amazon-inspector 55bb1c35b4c6e9b44adf7a131197be7eeaff564e25b876def5e375f6d6b0ca2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in implicit-chocolate-worm (npm)

Source: amazon-inspector 79ce71a3e2d18f0e12ca86af43879f3fde6721fed61c3aede0ecd42778ed7ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ill-chocolate-llama (npm)

Source: amazon-inspector b5555ac2c54f83f5d6054d0c5ca3c988693b9e111b21e1e7d6e7350584dd3c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in huge-chocolate-hoverfly (npm)

Source: amazon-inspector b073ab5e033538e5bde9c2e9e98d860050fde07855eb1cd304efe83812b181fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in horrible-chocolate-lynx (npm)

Source: amazon-inspector 27dca206256d094f4fcf778a0971423efe58f5183d9735c563ea16eac9532657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grim-chocolate-swallow (npm)

Source: amazon-inspector e1a4433a4c066605cc75fcb4aa888e79581552d2541ca57ef035348664f8c7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in gothic-chocolate-bass (npm)

Source: amazon-inspector 2ba1df2d05971bb725b340354a0aa6f42466aaaa12333b60c36f4361f02b482d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in gleaming-chocolate-cat (npm)

Source: amazon-inspector 00cd5d3413a83d04a7ccf20e9d34dc63a03c2de5a34edf13653e6ee8d9d2f338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in glamorous-chocolate-blackbird (npm)

Source: amazon-inspector 50c0d5cce03a0fe67643e84426006c83c80e17073c42179db9bb43dffcd086dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in familiar-chocolate-meadowlark (npm)

Source: amazon-inspector c7c949266125c77f21e20a48a1b5432677b17e8c8475aa4bd7d3ade41490a236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eventual-chocolate-crayfish (npm)

Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in equal-chocolate-jaguar (npm)

Source: amazon-inspector ff3e0664cb0930af4c469e773a480d937b576f02d3217330bf074b3e13314b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...