MAL-2025-66582 Malicious code in absolute-beige-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7c943f078cae1adb993f1f5a7713867a80b36e4cce4e521fde63b403ffbd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69501 Malicious code in multiple-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ca6c14764f9e4a5de0f6478dc1f4c564375a16f252c32483750acaf4316c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71666 Malicious code in xenacious-violet-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bccd6569b77bdc326dfe1d9ccad185d437ba11ff887fb3ac92e5f87623893eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70974 Malicious code in supposed-violet-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716a517adacdb1b1bc7bad95b18ad4aa10f700a7c568a3e7f430c18344f367d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66604 Malicious code in acceptable-lime-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a572d7f04fd0a7fe7aa940662fdd060a0d189c46b1a8641a80f7bd02ea325c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68390 Malicious code in formal-tan-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b2facced6d66e1651bc6e2c5f96d212ae8c3175379c52b8fb2a8f4531c2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66992 Malicious code in blind-red-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c52e2448d9953490fc66339c18c799fddd447e39bf4db3f03612d483fc16d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68901 Malicious code in inner-coffee-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb43827b00821192d87d2a4d4845c49c20d444a2340c9207a68c747d14b9e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall-emerald-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7289c16138569650387935cfde003c3311634ce3d7eceb9e18585e647586a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square-coffee-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810c6489fd1b4ec065f2c745dc8d310702c9ffa3dd4788b5f19c257124354890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative-salmon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ea7a48712e7659e37c8c0fed2970990a212875866f0b3e418cde7fcf18c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-aquamarine-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959a2604b81e71a4f0c58569cc46250c0c5b3656e24fbb9d820a9141cd42916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous-coffee-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff67102627342380cc50b670a8b1ed5de2c476d25ecb6f45793e846916e64ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4729d0dc4ffc6f2d98c535a6c284a54ce33a91d23643560aae28d4fc9591f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future-teal-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b326b647334f84af5e3ed88b612469105b442e51e45ca8a5d8f93047851a7506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-coffee-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080e2572a8feba244ecf632934ee45b0e8cce29cd999eab4cc99a14748074874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble-cyan-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292d3238300462b88a379b868dab0dbd1faf683c5f10337baddda35726e8aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-blush-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01dbae6dfd728b0d2e13f66a442362a30e572edaeeefbac5beb4df804e25529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...