MAL-2025-67594 Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66764 Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voiceless-chocolate-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6013c42c16f93a98fa6f7891505e4dc575046a261e93bd25b2f071e9d349ab32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-coral-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe22b3f8653ae7c9683ecbb49cca33aa42272237118c7285571e9cf68c6950d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultimate-ivory-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a99de23f38d879cbdb1345314d0e5457ecd20b701da8d8671a642285c8d978d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71305 Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69798 Malicious code in overseas-teal-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd73502da3b570b70fa56c2f5130e415c9b06bdbe4397bb19565e192a84aaa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running-aqua-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e020ca8a7a636d75f70ad620248ec44ac6a0d856a307afc390a2343d66e1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-coral-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a5211ffbab9b2bba7dbaeb7594cb6e5834f8aa951788ce64d1c4f8b5b57d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866109d007f0d94f2c8e06e818eb6d4607cac3c8e9f721226d8b8a3303c95664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-teal-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594fd5c8a38202bb0358b22aa4efeb55656649ccead0d1077d7c528a1792c5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70590 Malicious code in shiny-lime-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de4bcf13bacab09b2e2283166b8da951d953837d83850565c04a2f4a2ab15e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-fuchsia-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b523b11ef7c4e06847961e09f52301c51425feb96dbb9ae49e3ea48e6126d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent-brown-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92dbd6087014491104112cf573b4194681ad6f5012eae47f1d3179a460191ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial-jade-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a9cbbb64438caa2f6d0e9f19e76e5983ca2024e067c77ab28d097f34c49256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71111 Malicious code in thin-moccasin-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c6ed0673763327ff5790a48e89e08c43e9605263db05ec72c99606ce84002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68715 Malicious code in hostile-black-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b784381ae56f856fa4ca30252037c9e973c420e8b832b3c04ab4cfaec92aa4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-lavender-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc20b9420ae376b5bfb11c32255e26053c2d4023533968246ebf06b80a38c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67588 Malicious code in curly-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd3cd059baf8d64562f5f2fbe7b79af39c4969c6269227bf48a5c572de137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...