MAL-2025-68674 Malicious code in hilarious-pink-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155923af21d337fdba1e19d1a2b035a2654985edb74149b0421fc494f431c242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70974 Malicious code in supposed-violet-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716a517adacdb1b1bc7bad95b18ad4aa10f700a7c568a3e7f430c18344f367d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66992 Malicious code in blind-red-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c52e2448d9953490fc66339c18c799fddd447e39bf4db3f03612d483fc16d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69501 Malicious code in multiple-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ca6c14764f9e4a5de0f6478dc1f4c564375a16f252c32483750acaf4316c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71666 Malicious code in xenacious-violet-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bccd6569b77bdc326dfe1d9ccad185d437ba11ff887fb3ac92e5f87623893eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66582 Malicious code in absolute-beige-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7c943f078cae1adb993f1f5a7713867a80b36e4cce4e521fde63b403ffbd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68390 Malicious code in formal-tan-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b2facced6d66e1651bc6e2c5f96d212ae8c3175379c52b8fb2a8f4531c2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68901 Malicious code in inner-coffee-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb43827b00821192d87d2a4d4845c49c20d444a2340c9207a68c747d14b9e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-purple-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53ffe72631339f027488e99edebce7fef32bafe24fd28b0b23ad7f3ef6c4f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-blush-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01dbae6dfd728b0d2e13f66a442362a30e572edaeeefbac5beb4df804e25529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-teal-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74be10a70072fe028fa79742d985e49c1b1af1fe41219cc190b5296d68c3eb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-aquamarine-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959a2604b81e71a4f0c58569cc46250c0c5b3656e24fbb9d820a9141cd42916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regional-gold-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06758af259e6d6626d1cb10f8491a23336f77051d57e610e324a4b96ad2c1bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-plum-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34316396a69800220e795329b8151372648502e500ed8bd6428d809f43aa83ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny-maroon-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25534fd8c8d553b8e07c332302c3fde58c0a4639305c40cf8cb4b4cebbe05b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/nebulanomad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db67568dce6e7268c338052b70b603f10c69363ea9972f8e3a08ad824abcdff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intensive-aqua-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aa9acaa84379b4e13cf0f109d1647599e1ee3152114f9734b47c2e4f8544e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive-amaranth-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f345866abed3836a26f5cc0f8f3f6b8d0c22a79300c480b6f8d5a46b5e35eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divine-peach-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6742e3343e76f65715f9e276c1fa1002ee9bf0db7ae70545419f72764ac67345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...