MAL-2025-70643 Malicious code in skibidipap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fe20def72a331ee3bfbdeace05a5624841c9a2e653b236ba15f6e5812e887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due-amaranth-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7523ecdb53a060bcde3e9f3b05b4456e7cf861a6597c26e6c348b345d777da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67778 Malicious code in disabled-turquoise-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a90d82785b37ced475fc35674da0db93c5c0600d678cd678de4d3abe53e0b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69467 Malicious code in molecular-brown-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b448461a3079ca298f1e054407940cdeb9842834f1c2b5feb3cddb65219967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68447 Malicious code in full-ivory-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8dc6f6e4686daa2d21f377ef1a92018323685cdee5286ecf2093b76480dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current-coral-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21642c22551faa3ab3edc8f25a15196415770d5f130ed439d876ba545b7717b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69969 Malicious code in precise-rose-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e3a49588130d1da50416b111c6e71e7073b1b7a813901c2118cc70b34116dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66887 Malicious code in available-chocolate-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea7eb8d7f49b49709a8f8b1ce23027d86e47a00efc4107db02c8fbc24f35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing-azure-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c6ae5c006a8488af5a10d3d18c58e01a0943f5857d3d073c2f974fb794d401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan-scarlet-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12eee3024a08c95ee22550b3355e2fdf93fbd89b028656a0ff53a894aa10c6d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37a823019d4cdecf614b1e5facc002b38182c11bbda9574ddb72a6b3c07eedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous-indigo-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8d65ff022c5e3ed109e5ea395d5e3a55ba771f72f7540dc2eb9d94634037a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous-jade-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc56092245fc81ed78d1a20e8465a893126b38992874501ae53bcbb1cfb2852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous-black-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f810ed89d72b14719920459a56bb8b4859019ba0f95424b7fb9494c28690ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early-orange-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786a66000246e9f58983e11ce65f3321990748f793638c79a64eeb2e88d71bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed-azure-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed270828d646170e3baed52dd4df121f66af1f13cd0c8b0ef2b75becc7bafd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural-apricot-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05a42ad2a44ac5cbbd139144242c34f882e797dbdad51b3d8c2fe7a7402794e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in productive-amaranth-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81040136bb5cae134172199574f73da76125aacbfbb6d7921c61c95e17079418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-plum-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1e2e35e6e5d0b336e7b0a4be6148588d78ba06283f92368f65a8f0a97fb3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful-ivory-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bed77576b80ec02895d81665bd14663ee74036b695975c846f4b62b364b243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...