MAL-2025-71154 Malicious code in tory-crimson-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca4922998183fa450915085f19df4aefd583060164bc2a4bc4826ef23fd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71271 Malicious code in uneven-rose-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f28ee7879619b034ebb4cfbd6a10d8a81a66f5fa7e89dcbae3966c2f27d8c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70753 Malicious code in special-yellow-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4806075a97830de22dd5f0815ac9dd71c27c68733d6895ad9937efadbc541aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66664 Malicious code in adorable-indigo-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbd1c286756a81f697120589d5e557c404ff4f4965c7c924beab5c4a9037a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69377 Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-orange-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe1ec031559021ee997f82088e3df76753ec19574fe779efc06f0c21159a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent-gray-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2cd4aa359481ad251c2b39a6f4970055eb9670db80b5f4884ce17e2c091a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical-amaranth-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095e06499aefe36337976c1899bd5e6f5e0ce548c2e57acb88159fa54a1740c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy-plum-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4084b3478ed44e10d6d75f96fcc305cd56aafd384dd35cdfc8cb603af60006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-white-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06917ed4c161ff8e5709c9225f92fd1d3837cba7985bc5cc23a274c2a0e6858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief-green-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c315c14e1546d926d24aa60398bb0e8d527f57c59d47f677a5cc4bef082e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable-jade-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80af9c5c6a7e7189435cadbb92cb73d26676e257c873dd4700593b0ba02d8f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial-orange-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e679c1243b387847e8b9dab20ef639d8415ac0d7f58b8b2711ab4ef09f049a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-brown-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdb4bd13f546b1d20d5210cb4d24f34348f24f433288c54f6dd47733fc681fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight-apricot-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1687ea28057362e40ca009ef85fe43ca9a65a3db6f69d5e9214292a17b376b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate-harlequin-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2844eacc920d38e438e1b9ab6f51f0f12efd2d74e301bb22b7af98d601d5f3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist-tomato-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29a56b90de9201432562ccf576df4d0e8613cc9eac00f9b8b0b1155282dd591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange-blush-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b1147e1dbe42e9219f9faa55cea8fb805b76fa0374f263a0fc42610ca5c249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7544ec1cadddaf841dfa15e92e54adea6aa8cb3dd8242d0bac825e2e2a4772b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...