MAL-2025-67156 Malicious code in cheap-jade-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a81d3659d9fad15ce97a4bfbe71d73124eefbab59b32ef6330f292cbcd96a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71300 Malicious code in uninterested-jade-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b89904ee9d26d7b27216c044ae57ccb016a79b28be0bc69f94be3e1c6f97f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66731 Malicious code in alleged-amethyst-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc98614f0330f1b155a116a05748162262d4c16a399677268d6beea78157cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71142 Malicious code in tiny-amaranth-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e9063f345f407edf15ce0bca25c62dea86bd6c812c68c66d90eaf10ab640ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71050 Malicious code in tasty-green-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca26a3527b4ed9f8d552622389bfb350aebbafe1e1e08a436811e6bdefe51d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68802 Malicious code in implicit-orange-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edda98ec0545f06e72ae32c79ec4f541b81837034de791396beca34b8d65d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due-violet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036b7c4a7100f5255f3c56ce93ee564b5d619e50020bbffa83e4b7ddca1f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-red-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400970f0d41bb2e3753a74d093bda93ca752c71cca0d2ec7dd565cfd97c9ee8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-fuchsia-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46dc1df93e9286f0a8026d79e3d76691638ba5b3a7371886533fd9b02a9ba353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-copper-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e074ebfff418cfa8018b3b2c792f5a332417dd9e50086d41abd1eae1f357143e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale-blush-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7240ea137968f15331e86cf063e66a5acc4f34e028b2a4ae07cd7c60e3b5dc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic-scarlet-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e846f52ea0f66ec5d6ba06e6207b2100f0f07b7ac28281ba3d6f1468a6842f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-olive-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1eafc2af9d69410e8af87d9409020ce40ae41f85cd940554fd671437bd6905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab-plum-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910464ea5be1cc6fab5885f48dfcf14c48c763d2728798b807ff2c3e2d9b6180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-chocolate-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7d5b3b8008fe2f146c88283cb0da69dfef3e21a431c7dfd4f8ed38920e398f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open-olive-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0417f054dfd26e6ee5edd92d20a8e2aaac03f66f2ed03012e8435d19d0ee05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e3c5d54095c7f4b9f24445b33f2cc6e69e4f97c9e17c68b92a0da548fe01e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal-harlequin-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cc360feeda1b4538ddf6f00720187307bff9545511f5d801b2b33253f4fbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-scarlet-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6820f8530518ecbe2232340151d6f5c0ce5b10a76484d3f7a1ed88629868c001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...