MAL-2025-70546 Malicious code in severe-lavender-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a28600d212e6aebd7404ed287bf4e9d6b829f9d0806200fa0a347310989478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66583 Malicious code in absolute-black-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607d913ff6bf21a8825746412b98c1a6c971946064f92486990e01762980858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69680 Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing-apricot-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14c260583f4f96d3ef0b407e9c3f42d430bab768a649e7db104f173fdcb0199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure-rose-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9212341074ae025932099d881479cfcd60c01ab4165d6e70d5aabe0acf7dc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appropriate-purple-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe6ad64269944692f8ccdcefd8420cb77d0ca0c418f3c9e9e23646c88c23414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak-white-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec448c54d1165ba593a79ca773cdd8a7bd390fc6ff8fc0ec189f90828d66876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-copper-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bbfba63f48851fdfbbb3c25722cf2f51683842cfb0afd41a63a92dc8da8fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67956 Malicious code in efficient-jade-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4acb1e55471ef61f9b2bdca95310c4ba6c3c4c29a29e7f16c17c0fbf957f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71474 Malicious code in vital-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245d42d0c0fde6a7dc606068cb1e51970c6450ffb25b89cca7780ac4c4e712d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70201 Malicious code in rational-emerald-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a416d0bd0409b53f0dd447447f5be77cb904c28327c22902e1c66a70502ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-ubi97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6d2fad2bd7ced917c3d9731f13ee786bfe60f48574cda82f9fcf0a5b90b50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-mangut74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a54a7d1498b1cfda9144cf078f910c3cdc2a612eeb8f66ee287316ed94a6f9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-soto61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba890843ec68ca21100136e0ff84b0af1c75b023132b01c116e34effa0131c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ecfe796fe82850dbe334ec4a73b58f08398b3c7bfa1aec221e48e211974aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05e15b92c011fa1729804521afd34a0b002a323d4d7ab24a4b46dd0d9e2da3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tempe73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a7ea28b778332de283569fcd6ef49fb9c13b15350316eb8612afc7285a7637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-ruwet30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217f6dee984db50248ed479d1dc2e2c2b1437d1f6acba0b2aa4ed093d4e264e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c2e7713e37d3382be66d2673ca3fff28538f8c5b77ac58366e06eb6ad3e4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...