MAL-2025-70223 Malicious code in realistic-salmon-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6182fbc0961331903bf47a5def3f4057d85647ab5c6343fd745c94d8ff6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66796 Malicious code in anonymous-rose-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d6d0e18cdee45c51e2fcd1e55a045f9e202224d05377f3b2c4c44c725eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71024 Malicious code in sympathetic-ivory-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410a155785bb0c8fe3d5b52615db7ac4aa03c24cb097a41a5a0697046c99e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-indigo-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9618c7107d6e3b367f66e7e14e210a19b4e02d183aae1b212eccad38c205459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-emerald-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8950f91d59215f3c6694e5a9c7f1403d26bbb5d739b75dea3327cb78e5d05c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-magenta-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f454b10aac316c8b8ee8107a4363dbb35a6765c2df3aa2115aa2cd82a4c8c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-cyan-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94311306cab5c29716fdbf97c6cc774fd21b4f3b108a080b98f67279e6f357dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still-emerald-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b42b0a42a07cc08d54a634d714c74665ff888711343966ebc407bbb30d1edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing-moccasin-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bd94da847b607fe81a06ec19cade1c48d7174b1406c524bb306af486793c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c7cb59724468e345ec22cb0e663c032f176fc9cafc37dbf50353bece2c38ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced-purple-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b293ca94595749b186dcf7cb309dab9c1452b211b5bae65a436fb7206170a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-gold-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2218784cc7075d10081552114bfaff01ecb4722a47dd8182d4e4b8152fbd6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-pink-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b877ca4616991a93d8577b2ca60cbb3eeaeaa2430a0fcb96edf746ddc0dbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6627686f131b3f859b422f1c842cbad7d2ba637fc9b6c34b91ba057a50e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile-lime-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e67ce8a6a8e2637ad7552f455b521cb6c985e4d49f991b430115866b1372713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated-plum-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4cc5602110887b833f734dec3a67c46678a8a982b0e607e4434b2d330c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-coral-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5330830e3c363c962726083d936a6eb6e7347f2e7a50824dd6c334b27564136a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-rose-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a39061d5e88d3e1c5a566cb01df30e42b22a3153072c502db3c3c2ab4c4963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive-amethyst-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6bcc3e1b6b35e8fbce7f30a0e7c35e0a3d8b1b5b36f951196f135fe4f481d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...