MAL-2025-70774 Malicious code in spiritual-scarlet-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc977f87ab9dfa5659ad5788efcb026e0cbc95e29c00b0f6c84044daa40158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68251 Malicious code in fascinating-tan-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efaf1b39700249421c25fa74423c4ecfb6c489789f101dee9db15142f1dbbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left-fuchsia-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7b30d014a7c2e963db945c363a0b87b7f0b8f25a8231df93a029602bd76734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange-turquoise-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efccd9cc26c1c59aec3842cb453f94a074ecf8697af5eefcd3d37a0062acb402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anxious-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8e549d9189ddec050f333731458c51f66faf37fc1b70d521cc0742c68e629a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing-blush-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5eff7b79325d4cb727e207451b82a926f38e6745584fc7d8e41526cb358991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-tan-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49884d27c85e2c5e78e2ac151717de8f3b263db8f6b8a0c0f1718a2bc67ad93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-amethyst-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defff1fb09bc6dbacacca8335ca78b40236f8f5bd8ca59760de05e9925bb2ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric-gray-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0df0e37916912c185103a15bfc11173d3da0e3fd18ce816afe0753999ac6950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-violet-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a5114f5245158f4de27e939c61bf96712a048d25d332c328cb93b9c4f35b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-fuchsia-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a2bd698cc48c32727b3b8fcbbefc96f831a463b6caa25fe2e186797281471f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied-rose-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d644e3d58ce9e42c5779266e2bfd7d4a037c943fd841ef2e8c85678c61543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbd81cfa0a7be6a725480beb606ea3136d08a613dc4cfb77eb0174f26a5d479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill-indigo-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b30cea900f1631201a6a311183ede185a9365548fd258fb64cdd5147830b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy-brown-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f893c3972aa0d3b8e803417940b528f11557b66214b86203d5e18aee225e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-apricot-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1e83f29d8f3a617ccdaaa4bf0dad5e6757c6bb2b5ecc3872b4e0007f707d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious-olive-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be70bc84058613d237921c84661ff03ad21b6dd47293c73d27efa6e1840ef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...