MAL-2025-71179 Malicious code in tragic-turquoise-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7047b46fb97c7b88536d39495a563ab82c6bacb7af53d231399f7c55a7c66509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-amber-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd56d161bf64b116fbd1631fc4fb48842a57f404f2eec5c9d333034f36debe70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering-moccasin-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65bed430a21b9665a25de32202fbc46453d83b82ffdbea1d90d896c0e4285f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-gold-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869148705d3b12cb5c667a354ad4e4bc63a03e0121612a3e8e369f98691e4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious-black-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6775f2f96fd0cdb9c76488da3896123cf7466e8d7399577ba71cd9b23b624b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable-gold-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82371942ad3ef0ebde2ce108d883a379f4e213c7491db54b20623e3d3ab93881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform-amber-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7344771a2affd254f34742a2540a961b85c828d8fcf31682b76987917e408688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-aquamarine-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d14b86f91d72efb01e4b5215475d5a53c8d1f01b953e6bef345063d7339339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-aqua-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c12aa59ed503981f956a6706c77f472f9fe28374e7bf39a7234a4ba5c745d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin-aquamarine-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a20afc405cdfe6673847f7792aeb3e4c51c8194f414acef3786a5d74fbbccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-amaranth-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44039863490fcc255a016201af932e60a5996475bbad7c06d051879f8384c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable-turquoise-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49817fd42aa1b0250b1f67928d31cf5c034d49f4caf133b1bac6e5b05217ee7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected-harlequin-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ef8650b1d9a67bbbf0c528f647bcc2450f95ea776b677aa1d6d9bb032a000c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic-brown-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09644eb5056abf45b687d17181ba94df4cf0d0ae6b8b6c66d65529e6d540b126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-turquoise-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541afebd01471651746bb5347128897b6e119e38f481ac4c3d48b5238526f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f848b2d6ada58a0fc49d9c9a07c5f7cda5d384e040db17689bf8be37a2a77ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near-rose-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc42bb732ab33de9de4e60010ed2f863080e2ae022367345e2dfec5b0e438742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-amaranth-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56daea3b4df95092392eece269653c7092d0a8fbbe3afc80673c1c51b2ff4d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-violet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22ce9f3e331de55d5e56b36cb03d4947cca10426c7730ca4bf74917311db80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...