MAL-2025-67118 Malicious code in casual-coffee-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a7b2bdbe1609b297c3b2001fab719b990a21c786a4cbc1b20e57aff9830a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69778 Malicious code in outrageous-aquamarine-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f56422e2b3ca015f7771ec66c329b219bc5fd9a506cd3633373154a875b112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67787 Malicious code in distant-coral-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa775f2fc9bdcac13e8543a7305228ed4803521eb07029d18b10369c4f5c109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-tomato-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb62ba2f970aadf165bac30d424411eafeebaeabd8d275e831102326af24c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying-indigo-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f984810ce0efa3ccf61187cb191049ae965e66d375b14d2524f1608fcf7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy-black-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9b9ec7400b79b433176f1c6a1c1ba21f55e22d30cae60eda0b2729b0af0ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a00a22a5963761ed0d5429b8fbb00dd6a8b38115524fdf1280d5a0d062bfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty-peach-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c06c81ed58df5c7408506eb11b08470186bb8b7df9b38f6098d402f5d226e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff-red-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa5d5700c6127849b943127fa1c1aba66ace916d36e1cf64f58646a7b13a7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty-amaranth-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cb40e4dba9d41d7ef4c76328e1c158420ac313bed15fc6ff4040f608d7fcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing-crimson-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5aa9e2681e18d7906044b91819dddaede9910b1d4380330fc9626f5d915f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-green-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272fac395ed048e4b4912a4bc15bc530d6f90e4f953123d2a78b6515b78bf641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired-sapphire-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d8843ee23745f614932e6a8389867cb249e2c3ee1efa3b1cbd1bb1be8c8531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative-moccasin-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d9357cd3b173e26110bc01335c184b691aab1cf4b2aa28c4eeb7b8c381c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval-amethyst-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce66c5ac0bee9a840c121fe807ea4a8265e2b056e5ac60d67a02503e3be6cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill-moccasin-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a20d2ebc6bbb64f53e71ca304303c9c91c883f5cf9a23dcc241660b29cc2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71508 Malicious code in vulnerable-cyan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde09e4f2658c23d35c555d91b777541f2c6a963bc2d9ba3d496c6d004c5924f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67087 Malicious code in bumpy-maroon-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2c1b1fe29ff898d9b17478a847a6f1e446e445cb30df8e02620efd17e7c9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71122 Malicious code in thorough-sapphire-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100afd0a6c7b2174b674b1379cc1e9d95d18088d20eec9eb512a8513d2b9b075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...