MAL-2025-68920 Malicious code in insufficient-lime-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bacd9ed1fa4593049bcf0b6070a531184af86796a6b38b37f84b1ad6c1b8ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70724 Malicious code in sore-pink-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7a7f61d94422652526ed97e462bb43d7aadbbc95ec34afb78f18eac8673472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed-emerald-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b0baa120f81f5641fa72eae2b5cce3891e6b035a0645daa57d38736d29047d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following-black-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad715a4d66ae3db827cb7c0b17b514672bb6b26f076d556a70954f4666996259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising-lime-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9937be333f1ad789a37128206423d736e03b31ad6b644fad69bfb6abd56957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-tan-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e4be263ccc7e751a75f8e07d7c843c41313eea9aa19d1fcf90ee3e274a9ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-purple-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44babe7a39cbc6df30cdda9b71d4e03ca66d8e0e6b69e270a18d166c4076e75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-blush-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c6e411283a031f8d057a3b3e630eb64fa7774bd6fedbcff4110f4994119cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy-lime-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d555979e970764c8ed44a504eddd4a26db409c3d07000d2a0c0950251c01f3f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular-purple-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67e31a617872f336638e1b362e6f9b011f927aa8e677f5e30be9e54046a9d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe-peach-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba900152f25b1d7af6174ec42b7ef90aaf972514751f851a439e969fbb795c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced-tomato-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff2b60278e03279f791966c9bff1be323be12941524a4c377d0e9a16094b1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager-green-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71ead66acda41e32e3806c2adae804e9981d334bdf5427eec522696df9aca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71028 Malicious code in systematic-fuchsia-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0857437b7a75d9f699ecc6586ce55e4a43b6e9c43b19d120e9f1abb4a2d0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69261 Malicious code in main-gray-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac50ae13c089692a427e9a08e58fc637a1d950bc65765ba51b3913a61d50433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-white-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120dcea9a0d899ce2275748650416ec0f7a623616f1d756909add97db0e44f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet-lime-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331997ca0eae7b1b4bdea256c36958dcfda3325ca0d31d45675339849fab0bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-emerald-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7bd965d7cac942548ed7441ad208018990c8e418f6de32f1adff789ff7956f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate-rose-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89775125289ceea2f67ff15806b219b748eccecf8e0a0476265114c4ec623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...