MAL-2025-68864 Malicious code in indirect-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db24658869bffa4aca5f30e0c966494b08ba4606ecca9938b1d10b785a953393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69026 Malicious code in junior-aquamarine-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5c25fbe848577565d1c230f54001690b5746be07642850110c0e731f8f807c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69434 Malicious code in missing-orange-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad0f023e663bdb05ec7c31243516140dcab488c44066ca22e81b69d493db54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-beige-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df936319edbc12c3d59661d4a607486cd5bf1a629ea290cdef56ee6b70a5b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous-orange-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb64fa85843e00e1195b01a411a4a99c126adbe0544e7cf5572c6f40ccab021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated-sapphire-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6106800e1040b6d0bd3035d7fdb86b0f2a6839558d8ad8d54925fff71267ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy-amber-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22fa19c858c3a0648ef341f4c5c35a48ddb182867279307ae148c669310f0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual-amber-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749c1c107c480f5e02a82359f8690e2022d1abb94b9da4aafae34cd41e77b3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-brown-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f333c93f2b081e0cc7a089aa032ca819d40ef569898b7ccbe7769e77bb19525a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional-plum-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc0e5401da238794db8ef7e48f838d73f10794df2f822d06e26350a2fc3a940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d467d38ef61cdafcfcc163e771ac9688ba2952a03605e694fe309e09fddccdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-brown-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7e9ad811ee7126d7567fbe41b823891984378f252e95a6e598b30e8a8f4249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b26954e9abb77fe3981a70a04b4cfb6dab0be477cc81cfbc0e74fd59299120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main-coffee-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399e9569f57d1f6e9b8028b704c023bbfb0e549753b5c63a174fcb1b87e849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional-black-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea70bdf04196031dafd305b7540272f21609a4a37a01f43f069874a87f7b982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-apricot-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517c8e1705344ecf4b6147dc5405eb382edf755450bc863005a815b503adea32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...