Malicious code in frail-orange-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fb85d9d621aed854fb72ea4742c2d6853dbdb00e441920671fd39ccf303f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-green-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29936a485d34d73872a7532d9f1be19c895616ae7926c9ff91f63961670fee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid-amber-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b099d18035ca7fad7bf1e455b43b1003b9492074903171c2b9f9f6419d93fc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-tan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a071bb7266849f446e2d28cdf0789c8fd12ade0127d6c951d7e3aabf5d3a661f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely-coral-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505398836fc6833be1b6f4768a346df025426b185b1d434892f142cc84f8ef91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specified-beige-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855532255c4a0928ee0bec8744685be14e600e7c7b0db99bde26455813544346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking-purple-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca03b8b90ac16657270f2dfb7a7c069c7a164d8f8b54e77bf59d9e8dc084865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c1b77f2f2a8a352dee0e5843d55a43942177284d16b3cc2b98612817f80cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-plum-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca98fe964d40fca98da231de9126fc5c580bacbfc96fee992f4c4cb3b24b06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e2da2261b0094399538ba597ec863f6159895064cea16c397175c7cec2f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-black-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3476ed856e550997e83958ce62d48f1ad159294a349c30473a2deb117168d114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful-aquamarine-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60cfc7cb0001d675984f0440aab1a70b3219b828efa85832dc98e1f3613d9846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regional-gold-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06758af259e6d6626d1cb10f8491a23336f77051d57e610e324a4b96ad2c1bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective-lime-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87f72848be2bbc247120017226c1749fab81abc67387137258a35e59952f408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet-silver-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e857e75436012cd93ae040b6b7d28b0519a8635530c9d5578b7be6cd23ea2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advanced-magenta-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa7d306421eceee56d7214fb6c7e2f41aaf7298e43c5d4e45968512355296a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced-purple-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b293ca94595749b186dcf7cb309dab9c1452b211b5bae65a436fb7206170a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71051 Malicious code in tasty-moccasin-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8124192d4df1385de1426d5f0da4f32a98757194ab4c2953dee00101dfebd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71219 Malicious code in unable-emerald-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4433df00a1a0d7f70f240b5cca8ab6ca0c1d9e7f5ffcb2074a121366cf76ff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...