MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68934 Malicious code in intelligent-indigo-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3236da44132a0a7b5ff1862e026c36e0ffe678bd4ba5712d8f81c344df78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-red-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400970f0d41bb2e3753a74d093bda93ca752c71cca0d2ec7dd565cfd97c9ee8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious-crimson-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7125ae740fa64abc7e8a08a5014faa7e87a94176ac6c23a4b1bb0d5be31fdbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given-aqua-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fdf20206722798caf1568c47e9bb222f45356aab9e739fe6baa55129e69a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a281832f582a19431f5da9dd80e9d556c29d4f7c0423f55eb66cfdf7996dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-blush-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f1e6c77bdd9c139f83ac5d52e3941c698b140522269dd82bcc2fd446f8a7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-violet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22ce9f3e331de55d5e56b36cb03d4947cca10426c7730ca4bf74917311db80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale-blush-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7240ea137968f15331e86cf063e66a5acc4f34e028b2a4ae07cd7c60e3b5dc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69870 Malicious code in persistent-beige-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a801573b48932b8e64c285db902a0b5407607008fec4583c661922b0e33661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-jade-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63e4ed6632c2ada6ce981863ec296aa5df8d40f64281b3e765451b5ae7259f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-aquamarine-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d14b86f91d72efb01e4b5215475d5a53c8d1f01b953e6bef345063d7339339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-chocolate-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7d5b3b8008fe2f146c88283cb0da69dfef3e21a431c7dfd4f8ed38920e398f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-peach-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c9dd6906e692293eb4921e9ea447f509766d698878811aaaec3f24c47a104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in happy-sapphire-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2cc2fe642b9253d171a885c80c73d2e70ac767049f16cbfb37c6829cf19aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-apricot-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ed73874c57f97bc2fe6e241407ee819096d4967cb8fea7819493ebad514d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekdayy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df956119036e407b8a96a30e171e0ced3fe42699b074b8117b71a5d9bd97d78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...