MAL-2025-68670 Malicious code in hilarious-amber-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cdf7b64b17cd945e91466b61c428f3b83ef6a5d4e0dbc0b16cf87d506edee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68882 Malicious code in influential-chocolate-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bb1c35b4c6e9b44adf7a131197be7eeaff564e25b876def5e375f6d6b0ca2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69180 Malicious code in literary-maroon-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b1315c2422c9d9ed0123b474ca1c81e5b9cbd806da2024049eb356f0e6c01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71190 Malicious code in tricky-purple-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ed620c53c6e65ade0eb4e67460336127245310ef7b5808b09ffdb77a50e7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67139 Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67907 Malicious code in dying-green-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c908dc2e8c74a5abb2de9205fc910e1276ef474ba1bcd9f96291bc977342dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71600 Malicious code in wily-plum-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5be62b927e61034377c98b8d0fea17fe89133d437610d0e41e4dbc53b9d2c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical-purple-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e434b90adb4dbca10ea3c44576ac6f709d282d0d590f754edbc63d4d968435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft-violet-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b40a4d69aba395ceacd4ede4027eba92316f86a4da34d48027a6f7ad063e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-ivory-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3d8824a6923369e54e669ab24fe02a7eb3453cd5493f963db538d0efa37edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-emerald-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9e6163fabb8bd0a2dcea5d759ec8ab24eed059030b6db14a6500bfc4716546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content-magenta-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ee92f8bdb2d9e916825d74839e3dfd2f42e2e85936903e9f2b642c22a68298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce-gray-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d38a5c347ee8ad1eec27f8fd38b04da804835f08ca1045d0eb138a247af6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-coral-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcee1172210f6b588a3facf65efe24a4d4e96f893963b708e593726c01ba5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable-lavender-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cc4586f9920b93bdd3083b7d5174b0dcf8923b9bfca00c26bb8466c2fd4336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...