MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69457 Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71501 Malicious code in voluminous-jade-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc56092245fc81ed78d1a20e8465a893126b38992874501ae53bcbb1cfb2852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69918 Malicious code in polite-amber-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb50cb1a15dd90fcb90dc3bac7530e6b8b2e9dc409d48fb85bbd08b675ecdaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69463 Malicious code in modest-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5dce31c2e34c15682e326e0dbc982d7cfab618ac1847be297962ef8f08b6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66764 Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68674 Malicious code in hilarious-pink-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155923af21d337fdba1e19d1a2b035a2654985edb74149b0421fc494f431c242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate-olive-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1685a2b91e71eb22f4e1d2776b1b294924d99f8c8c7d3241996f248144b7285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing-chocolate-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c82b115c360a1f7de43ad1ce5cd3ccdeeac6934c7982fd563be72885ad5ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant-moccasin-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec3d41649b5e9b7e4dbed45b8351863b20a94e2a758d0e2d695607bea59eda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying-green-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd9470cebfb2d5f0e26cb6daf3851429b3cc82ab8d6c853b6c479403aecb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-amethyst-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fe6c761c83ceda4baba3365f9d43e8d701ac2d4d0537e76aacba762a8641a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-coffee-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bad0075af3e7603746c86b2b4696690b78b8d8e2abafd23efbcf79ec4c301f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-turquoise-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda0837e1717c893d01c072d3a5deb3f4b10a76bbc4cd6e0e049a1c0b4116d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-teal-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594fd5c8a38202bb0358b22aa4efeb55656649ccead0d1077d7c528a1792c5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only-aquamarine-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1795dafda0807ea826924644cd2f74f7c9a48f29586d30943ef0c28a353bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound-black-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c564ae7e2e35e2060d2ca9b296323609515215864bc3a6cb6b6f498983a9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...