MAL-2025-67815 Malicious code in disturbing-salmon-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafe10c77c92190ffe63acea7168cff2f75528fc24c66651d43ce5187e8314ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless-tan-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62aa43b338e7dbe17c860b741ded69cf006bc0167c992c7ed2a028ef5da4787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67820 Malicious code in diverse-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc206d8e741a0b930b4da3e3691a926149c6a9771793f682f134a6fd81c8b6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married-olive-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf59e5a1bc1b98a02d94cc1d362fb281dd2a3a106b4b5c7f6f21a93a9bcee46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70511 Malicious code in selected-brown-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefec0aec95de5deec86e4c8c6151adf56b0296297ca2c20fde10db7bead2f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68937 Malicious code in intelligent-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba4a606c0f32c6e749a5aec45d3c35a1c2ca8bd2384ebfdba07bd4adb477b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial-silver-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbe18aecb0cf92360defa06b3e836c99505f92e11514c5bd9e54b6da552b6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-violet-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a5114f5245158f4de27e939c61bf96712a048d25d332c328cb93b9c4f35b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clever-orange-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1596f35a38160a7e604107d8ac58c135fc2f9545ec6e517ed7d3c396e214e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71508 Malicious code in vulnerable-cyan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde09e4f2658c23d35c555d91b777541f2c6a963bc2d9ba3d496c6d004c5924f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71228 Malicious code in unaware-chocolate-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672c465ed5a9e604e9c4be3846b0f6307d2e3c7baa26da6560b2d7eb0fe71f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68898 Malicious code in initial-yellow-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecbd5eaa570a450f38f5a39399b8722e79d7e63e97095dbfed9adf168eeada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68523 Malicious code in gigantic-purple-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1593f710a77caadfb2d9b68900a5730b8ce4dfa5a2e7cec0f1f3e1474d99019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-bubur27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55962af69ed5f983c54c73b15b46a370a40b4481cfde891a32526df0e1632297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-ongol-ongol5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a747b2962493fe01bfe6904c5bf8025a54edb2ae2fe33245fbc319f5b0970e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65395 Malicious code in slimy_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec613266c766da92d28eefab8e0590bde8159be7eaf073b57b6d706f97b2d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64498 Malicious code in nina-lapis49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42235b9467cd15d85a0892598a762413345380ffc5ee920e737444f0fae9db21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61722 Malicious code in abstract_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d9aceff8c9905d14ffdcd30cb2e157c4821e534c239e7af1d2d17f0ca59795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-tahutek68-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1c58be3d5e505628e54c6830c12c75bc333b96ad78230c5807666e29a7cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...