MAL-2025-67123 Malicious code in cautious-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb927e3912bedd6129b6e72b1c39e04eee32126566e8274b0822ae83946c7b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68218 Malicious code in fair-sapphire-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57079ddacf02318f21d0a06f5a5e5c81d32e6b51296a41e355c958e3f074a6c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67223 Malicious code in clever-coral-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57d9574fbb7f10bdbf8f17c27e87f0e65757a322589e6312e7cd3c9286f0047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic-purple-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6a05fe32b6603f9d853c600aee112f84f15e4c10c5fc7b9ff0fdeb6ec903b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-coral-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdde3d1875c0e4107c0619040e5f959063955ed6722424fe08f70b2ee3aae9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pents2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691214dfbecd05bd8282a194106b31e1a651b587a045e4b86e5a83c33b43d343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable-amber-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35032f1e740f359b451e6e7d4618a5eb198315fdf6b38e5e3f30a003334306bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d367a7652de0497384529f73d29ebc0c9a72e11de0d4b99b21ea3cd0204ced4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-brown-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d90d4ffe34bbd1b486c2792fec4bd6829d724d030fd636092ff7e147e0068f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-lavender-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad097a7c78c3365b19f5c6c2119ad0ba2ac1d43dfa734457ca5066fcae35453b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse-moccasin-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258b58eb83b01d28361a8af657761e6a47ec6397316155c34bf1067016012c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-amber-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd842ab334b5595d5ab30b6d3ff9909e368e0061930b42f6b059c5710df34b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual-black-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a394818943d79f41fdc56d4fd7e146087403d867fc1b6fad3e586e386a62848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bottom-fuchsia-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad6fd6a98328f8630cddf652ba80179bf8d430e0c20a3b2da3c6843e144a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy-amber-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d51d04a14711acc3e5341977d5e9af8863614c53ae5f9b86ffd73ad18da1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19869a259e4e1cd31ec3886dde3c55fd0dcb9ce23e5aeff78f8073c10dc40acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-fuchsia-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377dbf16e1afbfafb4d844e40da7927a41bd66f4a032158ddb398c8c2222f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-rose-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91abb65a5ac6234ceccd4d9c5bc68f74bcceb36516048374b12845b230099f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-azure-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47454867cb9c2e6a4acc7c3de75fcfd6d8de2a188f2aff54b1592005a0c4e3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware-aqua-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23b196011d5f7c8bfeb882d8b5a9ebc3deab1ef70a12b3fbcd4b8d436f1d6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...