Malicious code in rational-amber-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d3691e2ff4a568705ca77c19e16231d44823aa60392819802b36b8f3d09e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-silver-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b800e0089ac637c60c63a4b72b42ee399be8c336b078830d65b4708b81c7dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amethyst-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3e38ec60386ac0affb0bc8f16e477e54815b2c19f87e8c29dc4cd00a44ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striped-scarlet-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a787a63e76d246ed55b83dfaad2a5916c6d804d0c6184ecabe449d0de19425f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative-coral-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b263a9b4ed0aea9432186687952c453f86cf5c615bb120a6eebaeead0232ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive-amaranth-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9293092e5301404d2f71af5e25b1ad94d9c20f605d37a63ad0070d98d0003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy-red-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c278efb1938931db7cb3a47b17225a63a0c1dc244458234c2f37e1fd1c4fef2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67443 Malicious code in continental-silver-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822ebefc26197f54f49d28fa2e2460871a8c1ae30e96167a17c94bd91e4542cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70016 Malicious code in prior-aqua-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4193df28f5a164b15ab0fd858e2b01eb05713cea5a4d632b24f70179d65b495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70974 Malicious code in supposed-violet-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716a517adacdb1b1bc7bad95b18ad4aa10f700a7c568a3e7f430c18344f367d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite-amber-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb50cb1a15dd90fcb90dc3bac7530e6b8b2e9dc409d48fb85bbd08b675ecdaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-emerald-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4433df00a1a0d7f70f240b5cca8ab6ca0c1d9e7f5ffcb2074a121366cf76ff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69540f883e4a49517c909adbe76e962368b99feefc624758cc456f440bfe3097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-chocolate-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb54bf6dbeaa93dd04abf3f30e30c145bda62f4256c2dc00909d762468385812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd3b5ebeeb8c62f78a0ddc7b4e5a3a328c3d188ec0b1c35af5fd387e7764eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy-violet-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25d400cc642c381645aec0ffd1ef6ed3aa3c3f3b029316ebbca2c6c49290051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful-jade-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1f64804f30c79bd544efb5798542154401881b9a5dc0cf0ac46270c837a466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-bronze-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387c6bbcec344d246523eb5045a18982753d70cfdf226e3968e099dd54f66383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory-peach-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8014c418d30866220e4a62d0f9f88dafbdc4aea2518ad5fcfaefafbc3093d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...