MAL-2025-70181 Malicious code in rapid-magenta-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6ede058df4f94ad90aa303f9e68a15dd27c21ab6a246f7f9b1dbaf3dfccd48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67339 Malicious code in compact-green-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9286c69cf114a3585fd24fefadd4408fdcae89285d495751dff1e18936bc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66835 Malicious code in armed-copper-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3af900662ab8b2fb082fb4f7eb88662f90e80868c3be089ca49203360ac4f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden-magenta-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e962008a3d6c2164f18c59e02c1e3099116a04eed88c463afb6a4a14b98e4c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature-teal-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f316cdb6c76ce9d19166a21723ef8cf5b36d6f53338d2f6b90f932c2ad9c9c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in super-violet-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe8e3e2d7af0b32f74fdc48394599dbd8a7307c47222b5f30e35ec1677dc726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural-tomato-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88206fb18403f46a4f2f8d3c6a9eae4761d3ac805024d357ad0ece5af55cea3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5edb1ace0966574a65cecd5e20f11c555d3820e852a59279e790ea85e41f801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany-ivory-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd58a193528e2a501ef2e46678877ed336f21146c6125f9a7c60ac1b5c46b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental-rose-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5702bc1eadb7b72cc28472b646cc0b368030f8d8d287088cef0ef571ce35445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling-copper-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df720ae901fbecd45ee28b0d2f7c44a9e69074904112538288cb5a03628a882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent-fuchsia-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fe85363078b2dc4162a04165c1680ec8134210020bd4679da9eede19a355a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional-amaranth-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97476f40fe1b6edf65be40e59e82a40a119c34c1a103f67422b8fd1b4c0f7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yodelling-sapphire-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f4e1e23bed17ae8fde64589de97aece70615f7c890851e724f6bf5ff522af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random-purple-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393a3289a9c1933113b8921671770bfddf4e0e7230e9fd8dd70d8a26cd9a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill-indigo-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b30cea900f1631201a6a311183ede185a9365548fd258fb64cdd5147830b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate-teal-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c634bbb2a7ec8a5a8b68c26702cd247255594cd5ef8c755b3d6814212b475bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mild-peach-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2518bde93b32fc5478b232ce0427149b971fc399941d083b46118a0616d1cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-indigo-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428451e10a9335f52c1ae577a1d6edad3f67a01f6a6ce58a49d07d3e0071ad22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...