MAL-2025-70221 Malicious code in realistic-lime-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ef87d9ab3037ec5306e98aa562b06066f5d958ab41dec3b57a9b9f2cdc09ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66882 Malicious code in automatic-scarlet-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e846f52ea0f66ec5d6ba06e6207b2100f0f07b7ac28281ba3d6f1468a6842f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70043 Malicious code in profound-gray-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbd0fbe549adf9cfbf2db3df1f64377a2540538a34b3a2243167ae9f9d12805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69467 Malicious code in molecular-brown-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b448461a3079ca298f1e054407940cdeb9842834f1c2b5feb3cddb65219967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69236 Malicious code in lucky-black-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532570fb0d23cea508a45df7704433797f39fac8ea624d4215b54c66e40bc02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68001 Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare-sapphire-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f33c0e881d649709057736137a5f0dbf2712506d8ada57d3135fba41546e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-fuchsia-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dca9f181fd031d15806dddac0169ed1ab12517f89843f8838a101bee31d8207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-apricot-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1988c41faf998866faa5bea614364e09fac1bc1ea4196e6abfb676700cdcdd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in richirok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9b3ec4c800158a7c721b237e626d01cc3d04ef6eaf33be85059835b93d1dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-turquoise-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd228d559a82b995a9e6128e1dfcdf41aa5392539db14b9dfa45f998129baf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex-black-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca9e5db858c1064e6a1d9b2d6e7bbbfb2af406769f92fb9dd372add98e00980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim-peach-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f41b2319588b2217f39c01396663705c121187a410907691b549bca6c444096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic-purple-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afa6b056f5a54de4d7c0b0f54d57abafbdd115cac55c46d67b4a595ef26872e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-scarlet-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4080214e6e792c1ffe5c60019c1f3a37f17e56897a051132d6a40b0cb4ce8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-magenta-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f454b10aac316c8b8ee8107a4363dbb35a6765c2df3aa2115aa2cd82a4c8c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-olive-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2936099ca0f61c01b1d2fd8bd16edc72c5a4aa64bb3f78065ffcff5c00239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-coffee-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4662108a78b9f5f79dd22075635cd5e5a267bb14b1526ac5cd8b633c60b6e348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible-beige-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bd04ea6114a69e1c7543abba31566fbd0e140dbb868af995f69b3ad417a229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...