MAL-2025-69697 Malicious code in odd-purple-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9576687b775650353a733f0c4e8d0e5b605fff5da0450ce790d771926906a0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69792 Malicious code in overall-coral-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764234f26ee09e5f80c02e91028ba7f033f7b885891809074172c51e93c9d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69065 Malicious code in late-bronze-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d191e0a8defd26626f374529537907cca149eecf65cef3897547bb7fffc7cfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69572 Malicious code in near-crimson-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f6d46d1b3918c3d65c5928e453bf72f4bd82a9a4da7c3fe60beea8466d0c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69206 Malicious code in long-chocolate-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15aa5297ca5131f550b695fb3064ca96f51fd43ebcbdbf0770eb02678f7d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70487 Malicious code in screeching-amaranth-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc43f7d71cb632ed8a75fa1641de61f6f3058563e64f2b03aa668425cc37b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-lime-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611255abbdb401769fe4735aa9b433d2a53a4ba84154447eec666d2a4ebb8b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-chocolate-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece94d09f87ed47b7aab12159e5ccc37d8feae1c28a6da7c40cd19a774254722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar-olive-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e505b05a1e202f10660f04449288544378bb565b3771b5da794e0e7413ea5000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme-gray-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ecd1224fbf22ba9f8df24f20a310fff325db0907db89685c9415b78231de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d90f2aeb82d1031d6afdcc0b35f93e1fb5add24a91dd8b233fe07a15e6163f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-gold-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2205c93dfe74e7ea41cbe47475ffcc62cf7d136ed2bdbac95da671dce46af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous-tan-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0d95ed24a0bfbd87441fa199db1ce78886b590e7fe03453bac0a28090b1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable-white-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e4f8400943f94f7178fbd29255bf2715718676ef1d57df59da9eb81441e293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive-cyan-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8731c0549606a5894f4d376bff280879a46fb0523161cade1fa51fba4e6af76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-pink-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d21043bd214a99674e2ee428fec309541a8b9e34aaef4ed5b199324c61ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-amber-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2971f8f8fcbabec9ae41313952e3b1c568585a43272c7ef6bccdeffc81b4c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-azure-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926101d7cdab3a580aa8ea8c0fd34596baf09a538a6ca6ab143a73141010693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...