MAL-2025-67323 Malicious code in commercial-blush-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894d9ebf74fc9ca2676e200a5aed4cf87ff536f42a6fcaa4a07d88cb35bdaffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68491 Malicious code in fuzzy-magenta-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed93d9aa32dcfcc53b1bcc4132f30a4517ee4dd521ce78be5fcb21c67719b6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68258 Malicious code in fast-emerald-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d96843802bd294c97f2f6ca5f062fdafe0fa3548667deb8c519ae734beb983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70366 Malicious code in resulting-copper-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36175b16f341ad83d6506d14fe384d74ed5c1864ebfd4d7761b72c1c3493792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70480 Malicious code in scientific-amber-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c977ab90c9c3ec7ac8264ad242b76ce5e9a0f4b79ed58ca90402c56a428b2984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67668 Malicious code in defensive-cyan-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8731c0549606a5894f4d376bff280879a46fb0523161cade1fa51fba4e6af76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d367a7652de0497384529f73d29ebc0c9a72e11de0d4b99b21ea3cd0204ced4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious-olive-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be70bc84058613d237921c84661ff03ad21b6dd47293c73d27efa6e1840ef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-black-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3476ed856e550997e83958ce62d48f1ad159294a349c30473a2deb117168d114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left-fuchsia-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7b30d014a7c2e963db945c363a0b87b7f0b8f25a8231df93a029602bd76734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior-blush-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cafa567178a7a53031107dbbae1b4faa2e08f5b7060870cbf6f44f9b13b34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-bronze-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bb2b9d5bc275f2075b844ca5ad10998eaac7135026621e3d3b63f521a9be0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful-aquamarine-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60cfc7cb0001d675984f0440aab1a70b3219b828efa85832dc98e1f3613d9846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-jade-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b9fa79a23d697727fd38892a3fec012b292541c3c9ba468beebdb90ff64a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-black-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a3cd036500e2c1ba1c2d1c46c4323b46dff5f713f588dbd44cd90cb0b3042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-amaranth-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16883d0aff72d352c9086fe2111e7a7a9ad6d17b93d3d70f1902e6bc31cc6237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid-amber-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b099d18035ca7fad7bf1e455b43b1003b9492074903171c2b9f9f6419d93fc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...