MAL-2025-68266 Malicious code in fast-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175116f086b8d70983393da40e15c19aca1da52bfaa3d6e6c99e9e1ec3080778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71066 Malicious code in technological-olive-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4842d4e25bb9f194a482745f542216c9ac2ffbf6a6d04ef7e75ca862dbea2038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68664 Malicious code in helpless-plum-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1001041a5344d10719f28fb3150584b7bd6be31b08850bde799cd0965387e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68954 Malicious code in interesting-yellow-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baf605dc0172666767e140b9aff0bd3d89cf7ee0b3d2a5316ead0c32bc4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71431 Malicious code in vertical-tan-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891ce3f3cdc86cbc11874359df91f55be147e36783a5e63106eb26827ff876e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71558 Malicious code in wet-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257acdbc69da100c14073df4ea73f72e7fb7e3e6f815b1974e3439680a52b43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious-crimson-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7125ae740fa64abc7e8a08a5014faa7e87a94176ac6c23a4b1bb0d5be31fdbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given-aqua-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fdf20206722798caf1568c47e9bb222f45356aab9e739fe6baa55129e69a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a281832f582a19431f5da9dd80e9d556c29d4f7c0423f55eb66cfdf7996dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-blush-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f1e6c77bdd9c139f83ac5d52e3941c698b140522269dd82bcc2fd446f8a7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-violet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22ce9f3e331de55d5e56b36cb03d4947cca10426c7730ca4bf74917311db80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale-blush-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7240ea137968f15331e86cf063e66a5acc4f34e028b2a4ae07cd7c60e3b5dc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-jade-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63e4ed6632c2ada6ce981863ec296aa5df8d40f64281b3e765451b5ae7259f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67570 Malicious code in crude-plum-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74231e4b6c1c5b2d0db6f1c98b1912f41928853659d77d061e5f89177883158a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-aquamarine-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d14b86f91d72efb01e4b5215475d5a53c8d1f01b953e6bef345063d7339339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-peach-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c9dd6906e692293eb4921e9ea447f509766d698878811aaaec3f24c47a104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...