MAL-2025-71237 Malicious code in uncertain-sapphire-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f295e8dede1a300c83597847ee5f13851fe2e9ad941c5187fa925677f2de5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67839 Malicious code in dominant-fuchsia-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66784b63dc03fd36b548946481748a2b043e092f2330fa295bd7553b3f5b2b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely-aquamarine-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2359fb86f59d6e1b186c4e64d33fca62288a6ef45f3036afcb5784b8d455a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional-magenta-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e65947bda5f74efeeff38cc5a7ef8620893ffb6e7f640251bc62262e8dd29ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant-silver-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a7a279613344f936623f693ddfe265f85e541046659cd10b69e237111159f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-black-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ced992abcfcc4fdc1051e69c55193333e19e613d56906644478124a80b30c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant-indigo-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4375de285b593003e0e41f7edf90a4494e70e98453c84beca63e2fa03f6b6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irrelevant-coffee-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c260a20a1236963509af69c32ae15248baf1b30e7984eeac4c28d3cf0ee740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-brown-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9fce6b61a6aea31ac791123bba3a5d485f5941d7aa3565219d81cb736c7180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-orange-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b790823ddd06071bc58f646f8e96bf7c7ee2c505f0bb4ae1a2a332176eababb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-ivory-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33251fd68ab452088d700395191723a979f6b5760058c765725f961d1de587e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-black-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd1f9c70907a2bae1c05ea4270a4048e5490023234e23911f4705d98583a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty-moccasin-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce515512d0715a335eff1fad4116d7ddb18cae66f468d7d36b5643527ef2150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce-red-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41377cedbb03159aebc917b253b8536590e34941344958b680d38668d1a4c327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall-plum-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc1cb4bf2ea8e886ea86428823e6cb4a159444a7d366594131ea3ed5aabb714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive-orange-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d01f9781e1840dadfecec22f5240e358b4ffd4bd9c1a69c70a77c9680d2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-amethyst-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3b9a92f1e02ba419ae9ac52036bd8a6cfc5c739f96f22edf0f5eb1564b820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-beige-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cff4bd786be4489b61a4a113e22319ebef104587b79c47918387801e82c8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...