MAL-2025-71288 Malicious code in unhappy-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978841f80fc19dd53b344847c548bb20c5b0487ac1df105de83e173fe8941438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68596 Malicious code in grim-yellow-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6516af53b000cd45d29855cf8bd69875a1d222ae586bb210f125389c0eb24f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68701 Malicious code in hon-olive-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a4078fd8c75c241a22ce02514b11d1a0ac4d11871e7f15c7e5dacc6fa8d33f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70473 Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68798 Malicious code in imperial-orange-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743f3ca96257188850168c051bf1db1488201b22c5c9547e942c34aa6520111e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71029 Malicious code in systematic-ivory-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b8e260b6e54bde8b8b7db1f6a85512159b40358c29145e90c83155a95d974c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70714 Malicious code in sole-salmon-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318cb5aafdae4290b93e47e904fe9d6f26e74c08382a17fa6dcb3bb8ba182266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69123 Malicious code in level-sapphire-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60edc243937646681faa70ffce2fc76d2b55de51cf4d0beb4bf24586a67f9650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69251 Malicious code in mad-white-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39d868a57c2fbdb55e161a2b5b1c898979009a06a341429536bf82f7e02173c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71091 Malicious code in then-red-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f1a5fe98331be193a2517d96daa404c77c3a5e172d79174ccf68e8e0bd52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd1ab3b131030644d495da62cd912628c876e2afbcb31d1fbb4cb56d5b2bdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-magenta-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a3be32eeda2105f68bdd87622ef37b1d2fe2a698c444f5486755126190fb2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy-plum-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4084b3478ed44e10d6d75f96fcc305cd56aafd384dd35cdfc8cb603af60006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precise-rose-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e3a49588130d1da50416b111c6e71e7073b1b7a813901c2118cc70b34116dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-gold-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d528ac9ed12371a60241a1873f86b3ab5743cb20825bf168d31f544b7ca993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact-cyan-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064e6d5f2fa9005b330c90d62d5304880d4d342ce8a329152e61c17257e2039b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic-moccasin-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42bca095113880b53a3cf81579f4881b197fb8f20598b25043aad2fc8c31fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial-purple-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c1cd4c41c1c76f4fcb622f78fbf388d7666158e08d528af5085acdde7953a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-copper-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d12414add444730a4cc30a6fa36093afa8df0ff4b9a1933053edce4c8f02639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful-azure-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bfc30d5a463b7cccc464c99cf73c70eaaaa12c2e9f8a1e40441c81a80c8e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...