MAL-2025-66699 Malicious code in aggregate-scarlet-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d846449a1c1702a5f064daeaf0f69bc84a1e26df0093b3d4df912735d48a2a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior-blush-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cafa567178a7a53031107dbbae1b4faa2e08f5b7060870cbf6f44f9b13b34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak-white-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec448c54d1165ba593a79ca773cdd8a7bd390fc6ff8fc0ec189f90828d66876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-gray-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651fda6b3b6e3ab7abca40dc135408b298dd8ac1943b33f5a069272538df2489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable-jade-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bccc27504a2c72acb8535403ed01a002af8d8b10e10a0e19e8c6732ae0b52b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-teal-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf27855b8d982d64570e54c2f90e76e0cb63f93110fdd99c4449dc1754f4488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-maroon-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40046addc25801c286d4b245da48b7b614ecb63ca044b0d8f6c4638df5cbc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicious-fuchsia-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd04cbef556937c82c20027d12bd9b7d3f4e5f6dbdce275a8a0c461def7df34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural-tomato-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88206fb18403f46a4f2f8d3c6a9eae4761d3ac805024d357ad0ece5af55cea3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in super-violet-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe8e3e2d7af0b32f74fdc48394599dbd8a7307c47222b5f30e35ec1677dc726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-amber-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ccba46be897fafe5c7e950361a1aaa247bacdccea9c6b229b4ca3e5db14247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male-bronze-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ade0606a2f17268e3219ac5dfe59687f358465ed6f11f3262d0766f261994a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined-tan-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ece710a79ef7ed0cb6a35a009203f21db732ba96f9747655279fb6bb3febc7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71026 Malicious code in sympathetic-rose-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bd7f698af77d5ef537c312bdbb86fd34cc7e3e25071036e954f329904e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68938 Malicious code in intense-amaranth-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a779ab82f1633dd34123a92395483b457a16d7096bf99615b1da53fe3a03a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70819 Malicious code in stale-moccasin-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9fe960364bffb413a2710b15beabeabddec4c8e8df4f0eb5a4a19506705fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68837 Malicious code in inc-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcb835a4cdb793602bffc3af2a71d8f6b49043da39d129943486908c4ecf57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68094 Malicious code in ethnic-azure-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b25115d5357dc55c34bf8c5ac54f738b5febb46f29e6a706694565faad7b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66618 Malicious code in accurate-scarlet-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cd466fdd3893c4dbfb79ae19cf787f46f109d4cc700cac4122dca23af98b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...