MAL-2025-70643 Malicious code in skibidipap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fe20def72a331ee3bfbdeace05a5624841c9a2e653b236ba15f6e5812e887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67762 Malicious code in diplomatic-maroon-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395e3433b9c2fe3cdc69ece01952861b7a12a9f97fecb15b97aff2ff2136dcd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71037 Malicious code in tall-white-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ea3e702461cf0b28d41732b2b24b56af2aee8e07ed815f75706eebd4708387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67618 Malicious code in dangerous-black-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c0ed07a7b7306bd4ca283dd90784ec9114544a0eed7ab202743cf3bbab2f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68808 Malicious code in impressed-bronze-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a2adcb1a0e27872b5e4d3a1a845ca77690608003cdd25bec42db4a61982dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial-blush-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74268585cafe04b13ac1648b205bd954184697ca6b99ce1c0cb8268cca0e33af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-jade-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar-fuchsia-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d7aba963456cc4b9f5d88efb5642ecd04b3b355e17a6bcd60daf55876ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low-brown-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8af030f7d627b1654918f903fd17f71c90e134d05cb7867eb36f7c2a41007b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable-lavender-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cc4586f9920b93bdd3083b7d5174b0dcf8923b9bfca00c26bb8466c2fd4336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160156899d54efae165224b9de6a63ad9d79c83010fc660a3dbf1c0b4a779de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65480e409db966d159ab97c3ed2bddde8af21509ac9938ef5431690db97bf69a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-rose-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971081b39afd29c32d7a6716ac2150e2a7ec1e30e37f8231b780a3b8c10aa2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising-apricot-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cbb2ebcd3b3aaa9130774eff4e4a99fa18ce8e204f5d9fdcd6e95949a2c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...