MAL-2025-69989 Malicious code in presidential-green-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb380cb4d5f7b4c7dfc2f9246f5bf5a3f36c4608d506f754d7fad17a4ba0136c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70567 Malicious code in shaky-yellow-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e1250dd1a16d5275b1b20af8686b46da93fac4819ac03e23beeb36789fc9216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71246 Malicious code in unconscious-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d420ab563d2cae056e32cbff56b7003246fd8131451a8c48ae50db4af0ec9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy-aquamarine-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f278cf692a01382215ed581f064b588439a2733e52856f09bdf74738604f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw-maroon-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254e5cfc0d185808744989d6bd880d75e1f8a060635b7bc29df50ec884495e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred-yellow-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcfb2ce089fd0f8e55628705f9902c251f41fd3774ed144d06ba1efc5c02881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68949 Malicious code in intensive-red-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1c7124029bb86dff596bfaf77c9a7161e5bba66c80d666ecedb6ee4b8d516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative-moccasin-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d9357cd3b173e26110bc01335c184b691aab1cf4b2aa28c4eeb7b8c381c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting-yellow-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baf605dc0172666767e140b9aff0bd3d89cf7ee0b3d2a5316ead0c32bc4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful-fuchsia-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a443dec52dd06a5ced591c78c440e4846f79305ac6c4feef5afebffd038ba8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blusace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed7cce2a7af438e4dc1270f790f4adaa7d78d478c23a4134925aa4ca1a31c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69262 Malicious code in main-harlequin-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1767d6a1dae8b63ee52a05cff4533172b5e22dca051ee0110f65cfcb4b8c9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale-tomato-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af5a4395a55228f60b49a519f5cc020a7bb94cc3e7f0e16c90c99f0ceed93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elflyyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be746b466eb6d32074ad4c024b8883f382a57599cf0b1d8406d2f379526bc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-teal-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bcd445a3a507659b19a1e581d1e5b77ec6f7cd784f03e2d50dd0aefd4f109f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-violet-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dec390dc136ad787b4ab956c07862bb7c382572ba3ad3f4b906bf295d375ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming-white-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc167ae0d1214189af8c725bf2eea5d66ac021cb82113e44b20c6be29291e179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious-amaranth-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df819eb8e33d66f6817bfdd6525fadc7c3fd914b1327eae1d29e2cfe3219a2c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior-gray-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef7b1ed63b8c35bf069d29abb82371034d7820707b99b32c72a50b304037655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e6256810c234e6f3dba17a458ab35e8595bf527ca1c8a397f452ca5b43afa8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...