MAL-2025-68500 Malicious code in gay-olive-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22294ee6fe7388799c80261fe8e2849b38b9b4a9f73ff3183e8c105c2ddda81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69671 Malicious code in objective-maroon-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a716ad90f8f9311a36903a21b25a485c39425767c5f181c5e6a07b8f2388a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67582 Malicious code in cultural-emerald-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c86ccedf789381c57cff1c4151372c07d21f9b1ee4be2c10c703773a8ecda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71679 Malicious code in xenophobic-purple-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece29cfe9a6effd409d6c94fed03cc1a96b85ef5952eccc192f87b574e4d004a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69099 Malicious code in legislative-gray-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b006f30e1a10c3985de43b729ed21889d97cfbe93ed0367ced34fec2fb49b870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69651 Malicious code in nuclear-apricot-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479ed9419848bb921ec467af85a1a6e230a71e6f622516a817302db0691180ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68194 Malicious code in external-beige-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77f5786f8f7f91cc3588dbca2c7e91fdf7560795b9f23f6492a5b437c167591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67511 Malicious code in corresponding-tan-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b8c513fc75375c836ad4416b6b0cf66b73ea8b4b34a38034cf30ee8c4a596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light-coffee-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a8e6c936fcaeb396e096a81d0ccfb8256f5b5328e3dc71baba7b8a729e646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bheyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0de7b985fcf88296db88eb43477a16582eec079bb3731ee0b6f43a1f001f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intact-beige-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f40bd00df3fa14afd0e27eb130a607639db01e259743e98838e97a8d424ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic-coffee-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645139da4c4fcc2e2dd80ca9d466dc3564b03e13717665ef6643d5997535a494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2014cf5356d8a20d50bae2592d5f57db23b2046f03ce3f53099995f3d571d8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-fuchsia-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb6e0368176708c17544b8a0b9c5b8b61a3294e29e8eb6a506cead781e7ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen-violet-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eba0d578d1311fc8a88cdbc64dbeda47e5a7050d4521be5cf43f24f8bbc1c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious-turquoise-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe9a2aee7f0c1bdaa9b4489ba5e85b487766abd34432328b7062582f15da173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-green-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7004faafa9d3ad86872f028aa8e3c09524a0bdb71ec442518c381f0c767d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional-azure-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0168d10875cefccbccd6118df609c52d6d2123eec3b09ca30c4a4b725aab4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e3c5d54095c7f4b9f24445b33f2cc6e69e4f97c9e17c68b92a0da548fe01e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful-crimson-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d037313b249832998907971106449c0b151fd611903cf91c7e11e28aef0b3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...