MAL-2025-68944 Malicious code in intensive-aqua-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aa9acaa84379b4e13cf0f109d1647599e1ee3152114f9734b47c2e4f8544e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60b667e6b7ef5491c0fedd90407e11fe537c159ec954e52a83d9be246aacf75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main-harlequin-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1767d6a1dae8b63ee52a05cff4533172b5e22dca051ee0110f65cfcb4b8c9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy-crimson-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835f31edc3e48f86ee2fe2461777944d02609f4995414ed7e0fbbdfa1f8db968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-blue-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9d304ca359d44fcff19a25fb5dd3f670b372bfcdbcc0630114a022344d1a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable-amaranth-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb38e006e879ddd07650ba637225d24fb18505b17897ae6d9c247d01567fe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital-white-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eac7a67c6980ce8a5e0c77caba35bdaaa225a1d6e34c93d0a7529c92ca1b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous-cyan-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1022f49cb9a6482d367456c7f4b2efb68e49b267da672dc7059b57b2622e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-silver-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cebe2d7c5eb39daa3a1bbc9bc29a735f100f447eea91f2178e2d5d955d8fee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat-plum-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac523543037977165eee48277cae8ae6dab92afd8fe774c4a4f1553b8a8c78f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-blush-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427fe9169032b942c97c8ad6dba0a30034269580549104fa4935749ce3dfe045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artistic-white-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea4ced7703f865b0cc4ad0aa33918b148fa3afc826ce44012ef3a8bfa0e29bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical-copper-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1354ad7deb27115bf8a28b709b1627ce48fd9b58db160f5f97552d7993d1ca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic-jade-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc326f863ae1b00cdec8fd7a9a02ca242c7798579274c0140ddd89e9c2ef420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-black-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302076df9010268edd1c2b746ed68eec2950df4e8476a2dad81167a29fd9ae0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb369be696eca3294e5c7bd646b36bedda460ddf2dfc2a325526001a5debe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71136 Malicious code in tight-copper-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c4b63883ccb709694df00325e9d5182362c77e2eca8efbc0dd2ddc84e32ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68970 Malicious code in intimate-amethyst-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98228dfffccf4c886bf9b3fcded1ccff70a0cdc6d8e32f67e3c7b591cfe68087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70255 Malicious code in regional-red-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64a586a804cc160a9937432240e4cc85f46ec7bed94e7355b4a002b25b2281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66797 Malicious code in anxious-amber-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e86b14680c7e4eadcffdd639dc9bc37261ab04224871f8584409c100a8c6055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...