MAL-2025-71144 Malicious code in tiny-red-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b027fd39b632cb7864ad150e7b65562e7fdcb3dfd5877181cef17890a90c367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8966270c26cd78822b61d396751db9225378a9c778767569a4389cbf7c73ff33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme-tan-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a189d6a1a57068d599e248185f196616262e136064a9782556b958a7be9252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legislative-chocolate-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b09905b97b3c436575752484fb9798270ba21dd29f4b33b5a598f3df24c3bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool-aqua-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af95dffe81788310f78c8074f6046704c1d0f294e76ddf93f698476b686039c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-gray-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d1eb2049b7b4c3f765b9f7d25e02bc0c5f9fa3317d095400fa7833bf59e076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow-magenta-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e149eaf9d9c06a8f245a121ad697f97689115f8f274c0890b90864b17b695c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful-teal-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfbeef353252e003c61fe83f322ecd6a730e17f39a33428d00bdc279dbae0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising-tomato-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec2d0a6551402c7ffe7338401437c0b5e630752e025cd2735e019ad0fb426b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-jade-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8a26fbc6ccf1a66847e19879f8728bf3d6052a5a4cc021b0c6fe84ac485ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate-beige-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c95c0745b9998315e41f8ce760662d6d588fa027611f87d710989d25d970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy-ivory-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca8d544cdc5c609bc9519e67b075c912a0541daa461147f06e495a28fc3a4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent-rose-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da82e72c4315d982aee6aeab4fd387972ed302aaf02618d128a4aa8a3819d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blusace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed7cce2a7af438e4dc1270f790f4adaa7d78d478c23a4134925aa4ca1a31c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-tomato-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ad301515d71c97966044c99ea1916b676da61613831075606b740c593ea50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome-scarlet-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58905e8c44e490c1d78a2ad156372e66dda01891ce9e7d0d29a24d050a9d3078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich-silver-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe505f4c148febb219f0ce999730fc2358804f7748f16907af01ac6dade974e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68040 Malicious code in energetic-beige-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31927015f010eacac0dd53063ba10ac2f00ebb612de3b9d5d9d766719db37bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70763 Malicious code in spicy-aquamarine-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf609eb7f5e1dc8326629d6d2301bc431965fd167226265c1e5d46e9ad136bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...