Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68627 Malicious code in handicapped-blue-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12ac73306fa2d1e9649e76448b3a58fc5920c68e06ea10108ed3b65c39b5db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68452 Malicious code in fun-maroon-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26af88761afc73e2ba0b04877773dc1a295394c637b216673c147f7880e3f104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71434 Malicious code in very-copper-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ad46de82c1061354c3d4eb5c5af6eca98a158775db15f8ff4193b00523311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68167 Malicious code in expected-fuchsia-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb6e0368176708c17544b8a0b9c5b8b61a3294e29e8eb6a506cead781e7ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69378 Malicious code in mid-yellow-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ac26bd419172fb81571be5abf661b03963bbafd3015cfd1a0bad750e94ac0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70689 Malicious code in smart-jade-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d81d73f188506c50c60d95ebc4e8f4c201a38961f852006ae6f90bf769268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67515 Malicious code in costly-chocolate-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b41e345292f9259e82c48dd7261d1320fe8528d59d2ee5d977d16e31cc3d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69216 Malicious code in lost-fuchsia-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efcc411461374df0f45fac1bed1c6051febad3597a4bcee6645d911b1a2ad81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68189 Malicious code in extended-red-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867e220d17e9c853b5e08a06944e3f06f708834f9575504ff0ab3cb12b1b15c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-ivory-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035137c5f949e0edb6de5406b68eb04eed3ade1f082867bb13f2d684676b80b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8821c2cac5fe1aa35260bc2bd9e51b7e139130b9049e16b6ebfe568a86c3f5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed-coffee-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f4742e713f37154602c5a6c01699e8c3933745bd265ab13101623db6d30c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-violet-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb0e5abc812d4e5187c82df20ca1e751f2b9d5ed63857a757051bccd157e094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70522 Malicious code in selfish-jade-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b83aec333babbd4dfba9e93006e062bf2688f80417cf854296f45e09545bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-rose-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2ea3d085281f31ecf0833638695e3eadbcc6451be3c0b94266db2d218b4df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29824b3764e4a56879f3c94796fa7451a374fadf2d736e18c11e7015df1038a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66818 Malicious code in appropriate-amaranth-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7029ab1e9a8977c5c3ba17f0d4039f3dfe179686d9c423acb2cca25ec9b8766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66694 Malicious code in afraid-emerald-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2342adc95404f1fdd5607c8ef5e9e7c10fe7f2b5b1521f75bc3054fa9af5bfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d0a67f7b15f1064e5c279642cc60c40664831ea46b8402babbee020bf09654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...