MAL-2025-73633 Malicious code in jaja-ketoprak33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8433e0e182e510514a5c5eb97c1daf2d92a10729947ba654642885fc7be88c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulatory-fuchsia-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2042aa54307128c903d87d2f038cab374b5df3bf6fda5c1e69c22106c4faa8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform-amaranth-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d463bcd8da9c729e9f93e7b0165942b9e1ee908a147e2457ac6436ecc799ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-moccasin-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5e12307fff9bc985590e90c0910484ad9d555b8ebdb12dfd22b8bdeded8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66738 Malicious code in allied-copper-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be746036ad4fd58c7e73cc48c2c9c50402605d3d4d4d85242ed678b2746cdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68719 Malicious code in hostile-ivory-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98ce5d8084d21e1d346f583d2982c62f529ff690aad20b0336abf40558e00a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67034 Malicious code in bottom-fuchsia-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad6fd6a98328f8630cddf652ba80179bf8d430e0c20a3b2da3c6843e144a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69892 Malicious code in pinkwolv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa34ec5b6f6b0ea500b6738f925de323e34297f13690e7d8b2614636f19f8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67393 Malicious code in concrete-lavender-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e94e24198b0873c9a263633a821d6f2003f2eebcf73ba5e8ad65dc1c7c8f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-amber-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dfdb46c6eb9f08bdcadb9b223da6c1e2d4b5959f73c8b1c72f88b80f9756ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-jade-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb414a397d4e983d8b94a560ba15581a53e3a678babcf905dec91b369813c117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-green-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c0a66e8bf4723c17b02503e8649d2f410b96125c93fd6997d2d569d7a7f87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70323 Malicious code in renewed-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14710c3ebaf6a17c6ff7881fe33b4c167e029a49b2bd73db8112103863c5721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71751 Malicious code in ytterbic-teal-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc4be4fb7a9d0a0c2d93426ca7c0eb78c3ad9e4df4f360defeb6ae1059307eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70473 Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67390 Malicious code in concerned-silver-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b82a96891e7a918e290b4e6b546742a6040b4f3e5816a01230358ce753bc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69357 Malicious code in melodic-gray-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963534d98e1a567e13c84016da28e0a487211dfcabdae487c40d4ed7219a9725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-copper-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1f98dcf328a617c8cc9f55dce067227ae10817184a04bbd903d4cfb7a8d896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal-crimson-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d0c014b996150dc2f6e8c6ce228264433db8c5c00d3343e81418db0211ab16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c259c0f89aff7f17c0063923afb25394201fbcbdd2865660ec945c6b8694a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...