MAL-2025-68810 Malicious code in impressed-magenta-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41053f427425ece88e955959a3a95250fb95093665d8c23b6b9db82776319c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68995 Malicious code in itchy-magenta-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed7d93cccaa29bdec148b7fa1bfd33da292d5aa11e94907496c74276f7f6278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae4daa038f351673b5b76520af182653ceb094019af2896d7358fd6df1d793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent-pink-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ab26be9add52543d95433400d44891528ea8f428884ac26e8eec4e7360ab75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70099 Malicious code in public-ivory-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a90527d379a0df7ca96165babf7847f889318981ba2dfc6ec1aa164e728e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty-moccasin-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce515512d0715a335eff1fad4116d7ddb18cae66f468d7d36b5643527ef2150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66728 Malicious code in alive-scarlet-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4803120d621ccaaeb1c27d657cfa0839a69e6d98f113b92821a0022c8cc9948e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70406 Malicious code in roasted-indigo-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34307d7160b686e7ecb3e8d46496c8a77d5a210621a956e0a4b27659776aa012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70972 Malicious code in supposed-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29824b3764e4a56879f3c94796fa7451a374fadf2d736e18c11e7015df1038a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66660 Malicious code in administrative-coral-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b263a9b4ed0aea9432186687952c453f86cf5c615bb120a6eebaeead0232ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68425 Malicious code in frequent-jade-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcecbabdb17d4da973d00990b7e0979ae957049cefec48de628ad9d6f1f49bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69654 Malicious code in nuclear-silver-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daaeb50073cedc2e0d6d6f542f213961cb6151e102037b19a59bf46f83bac4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68131 Malicious code in exact-jade-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6c4da6700aa57fa4a32bb32a4290c6a36c60c5427fe68ed318e9490c30fc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-moci20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11763feafa0a46db30a00289f41ead4670df496ac4f947c7e5703a5c38f95a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-ketoprak66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b255c2a8d655b9605a00d646f77c9920fe3c1137a815a7719219179f4f3eec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-nasisayur45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb4e7d32ecf5cbe24b9bd69a6e707236b5dd180d62a30f6e918aca618cee707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62865 Malicious code in fadhil-buburayam72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4dd141e6938e621a07e10a05a1b01d56ece2b7406e8b1d7637ef29bd7393a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63173 Malicious code in gita-mieaceh1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4c4130fff681af93c4d203fc4300ec4caa2d697764f0d9e63f98ddc31cc992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-sambel93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5824719ae09b82d3a54a41a58c66d28a1778be7bf002eb404bd5a1a413f10d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-sate65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e88501dccb24581b8826aaf0eb4b5b7e0df08cef01576ce56996d964b6a4ded8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...