MAL-2025-66870 Malicious code in attractive-magenta-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9385e54d1d98f957ca20fb4494ca8768cf1b4020452177770316d78aa5e9f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67747 Malicious code in developing-blue-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25667a5a0d4f9f70426c1f01793ed0527c3311c362d25d3a3f2a72fe8717a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67090 Malicious code in bumpy-peach-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9086d8a078553ed2fc9ed9c6fa9b20b45c23276c060050b403cc24bec03b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-red-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3d7405795dc54a69eab4fe2508cd7b65b613180af0cee665c3d8c64658e4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-tomato-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4749a304e5cf0c370e44bd5e048bfa68027b5f3a05515931f48dd69f39646b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore-crimson-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de034b20a6e5ba4a2c6e29bec9c51e42f5440f1b0870ff24a93a60fdab7e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent-brown-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92dbd6087014491104112cf573b4194681ad6f5012eae47f1d3179a460191ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent-white-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235fa9d8a354ca8e9223a390156368dce547fd4dc40870e237e4d3c118002f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-copper-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace9b73582320f13560ccc4e992176c395b9907b3a4d9ed3385bde6871ef2816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyeonhau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c827a02789b20087042259dfc2637e7c37b55e9832731d54ff668303ccac3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running-aqua-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e020ca8a7a636d75f70ad620248ec44ac6a0d856a307afc390a2343d66e1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71394 Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67588 Malicious code in curly-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd3cd059baf8d64562f5f2fbe7b79af39c4969c6269227bf48a5c572de137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70777 Malicious code in splendid-coffee-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a91fc62b1d12053d35466b0aa3f98af9b3da0cea34ad55f598362f06513f73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71264 Malicious code in uneven-amethyst-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e581fae095700711576a7e6f8a3b9288889912ce3600659c615ca855d385b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67594 Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67617 Malicious code in damp-jade-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4843b3b5ab85d0619aa1f37f82739790bef41b23f28cd54725defc40c36413e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...