MAL-2025-67983 Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow-blue-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1271707ba1fff1cdf4b58258e4f4f122ec45b2468f44ddffd7e95a2cd4b45d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in richirok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9b3ec4c800158a7c721b237e626d01cc3d04ef6eaf33be85059835b93d1dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69836 Malicious code in passing-silver-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07283ebff686110d09d5a7d2e0414f484052f91a1175a593801200e22aa02553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68427 Malicious code in frequent-teal-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ea18f70e7006470f438124dea2d5bd1bfafc7ca02c5c507804dad0c6c547b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic-yellow-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c885a2a4caa7c910751cc963e0c6ba8015251a591b52dc74989238a2563d8e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-violet-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c10d63ea276af842ef6f8a69d4035ab571ca02740b3a7389fbbc26f57baf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular-white-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e330224b92cd1fd2ec49049fcd319e50feb3476ea27322623a580bb948b261ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-amber-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42699aa96c8bd124674e7f5e301b89b22da8a17b151b4f3be42f89b526a2ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66934 Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69375 Malicious code in mid-fuchsia-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3e8af5fa6ad4b48fd1f2fb821db615f1eafc52386a403d9e789f33c05b954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68015 Malicious code in empirical-aqua-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d5b932bf56517d8470b61ad758e1ae23963b8b991da6ba1ee4283e0be9ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68038 Malicious code in endless-turquoise-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff5c109a61e58c5767a2b42c54204bc2bf87bd85f5fb3c8d96cfcd4342d0521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69859 Malicious code in peculiar-rose-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8942e3c365695bac2fa1414374723f7024d3fec91ca529501820bd1ffb1576ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71001 Malicious code in surviving-beige-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec1cbc9c06ca0a1a1dd05f8c405c6b74460989a451565d491e49601e65e681d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer-peach-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46df34f4f2c9839b0c16845e8257561208a2fc64a28f4b6942c4d8de5accb70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69798 Malicious code in overseas-teal-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd73502da3b570b70fa56c2f5130e415c9b06bdbe4397bb19565e192a84aaa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62109 Malicious code in blind_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bf55d3be2c07b1c760eb867ea40868440946eec5bdb38ee380c2238fb094f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-rawon17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed71ba9019e7f8c1c8229b8bd6dc9b44c6c0649d516768c0045c56a5f03c4810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-oblok8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1e9e3fc1258ce1c2876a169896a14baedb74a4ce10e0578ade96b96a1becea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...