MAL-2025-67421 Malicious code in conservation-olive-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ceee49120441d56a775da6733f3f392ce0c2bffbc5946f24f8210e018efdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66722 Malicious code in alert-tomato-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb62ba2f970aadf165bac30d424411eafeebaeabd8d275e831102326af24c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69674 Malicious code in obliged-amaranth-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc98befe8ac2ebe814c48390068360f6c41f6956125697df81d6d75fbf476e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71267 Malicious code in uneven-chocolate-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc028dac9f7f90ca3ac492a5438af1b502f2c845366c50704aeb8c388a225c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66667 Malicious code in advanced-aqua-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7968dc8bed39f9d697c80f40ce35c10533b0c1eb0a4252a08781e7d2014f46dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71298 Malicious code in uninterested-black-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedbab79f019684e318fbbc26ef362842470a0b44535c87c7ead478b37992546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70044 Malicious code in profound-indigo-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b977f1d1c9069dc299bc6b4bd8b075bc066a0e9e5352670b0260b8204f6da2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind-ivory-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886a79068e6421a20272c79d59baa6c9bb70380233aff6c84d941578f497d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude-olive-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82650962279757424e75119d3d4d14a2a6eeb507110d5b8156454af8e65cfbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic-apricot-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c359ab7035fa1e4695fb77133358a40d5666578fc07022b35267e0a52db2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential-azure-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dc7741f52f84c2afbbc1e73e367189a4d0ba7f2259373dffa7fffb5183e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-scarlet-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4080214e6e792c1ffe5c60019c1f3a37f17e56897a051132d6a40b0cb4ce8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant-pink-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b85592e65969d30d08d92baf989861820001848b47724ce557e551555f9f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866109d007f0d94f2c8e06e818eb6d4607cac3c8e9f721226d8b8a3303c95664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69022 Malicious code in juicy-chocolate-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7d68dcbe7aa9c9413536ba4db6b4d277c3f12308374cfcbdbc31d0fe561e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67816 Malicious code in disturbing-violet-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d00b1c818819653e9fba3a7e23746783671ab3166b943e27509f304f722b819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbd81cfa0a7be6a725480beb606ea3136d08a613dc4cfb77eb0174f26a5d479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-aqua-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc6e56f206041a3f1c069ee091f812ec14369fea9fec65fceb83cebbcc662d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-blush-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2186240116c8ad343d24630dec3be48f8105d0f3b2890ad19ee5d55b33fefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head-sapphire-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f28d9da843f6de9514a4079f13a47d67475b5ea19e0a3a1917b092f14f9e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...