MAL-2025-68141 Malicious code in exceptional-olive-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6559adf490b72c6743b31e0e428e1a0e9f377bdbfb0f2238ec95c7e6ccbd62c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69038 Malicious code in keen-green-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f218711f1012740b531873630c392ad5712eccf58ad020a22104c4d20b8f844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-black-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ced992abcfcc4fdc1051e69c55193333e19e613d56906644478124a80b30c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-lime-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2940b0b7f2eb86438ad5a59c3e792be31377ea7eb362fd4392c2d8c6c866b56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural-aqua-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e3455e90561789bc8d23615f22873b47118e0fd7fdb19f829f84c7fa7112d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated-turquoise-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b96ac3a8fb643a14c82c101f5a99835eb95dea2cd2a8468482eda1d7f54848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-maroon-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae7ffff45f6462ee052333e75268751b29cf8af656df9ec8a8c8e28c53ea070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/ciphersage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2a5b3466a9a0966cbec8fea3a3c30a21f29edeb9b0c51f8e727affe28a1106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9149d6e69ecde9b2b2bba6d96e3344b404209f74dfd4a68e03aeaa250ad58d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d342ed90ef9ec6b3167c1f6c6cc32a1afcb6922b8023cceadb2c8ed64c05c7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running-aqua-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e020ca8a7a636d75f70ad620248ec44ac6a0d856a307afc390a2343d66e1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-blush-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f96f6408249c74bd44d42a657cf719eaebf4400056e9b75f580611b3a8838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal-harlequin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0eef2ecd089c27212b3f2a848c875503c8b4334726d16741cb5938e6b084e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a281832f582a19431f5da9dd80e9d556c29d4f7c0423f55eb66cfdf7996dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate-red-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23584fa1d22ba703f141982ea5aa0e529356db93ca2a95412ab1ba8a71e32cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68903 Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant-sapphire-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508301b71d8ddf47837a664c71a0eb5720e2c764712817261c6e3409468236f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine-peach-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e9a7f5f984bfd443fa8310d7dc40e62e42a070c5fbf7fba37a223fe4193a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...