MAL-2025-70327 Malicious code in representative-crimson-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d89cd3cfbb5376aa8091140e6c592392eceb6d841b76826f1d7a000e0d4d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69434 Malicious code in missing-orange-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad0f023e663bdb05ec7c31243516140dcab488c44066ca22e81b69d493db54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-apricot-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517c8e1705344ecf4b6147dc5405eb382edf755450bc863005a815b503adea32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-orange-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe1ec031559021ee997f82088e3df76753ec19574fe779efc06f0c21159a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless-tomato-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce704283a1d64424ca95819abf4fab83e68421e734c01192e53c5706d45004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-lime-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73cdbec90e0ce34792209cdb66490804002d881662653a8fddde5b2c8665033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291f0573a7944df5799ab3f9d6a3cfa62253779e4de8dd021611b2a932118761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre-bronze-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6338d85da11f00349292bf44cca72d7b26c498ce37ee16ae975f9bc83b85f9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-beige-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df936319edbc12c3d59661d4a607486cd5bf1a629ea290cdef56ee6b70a5b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional-plum-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc0e5401da238794db8ef7e48f838d73f10794df2f822d06e26350a2fc3a940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-brown-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7e9ad811ee7126d7567fbe41b823891984378f252e95a6e598b30e8a8f4249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-brown-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f333c93f2b081e0cc7a089aa032ca819d40ef569898b7ccbe7769e77bb19525a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy-amber-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22fa19c858c3a0648ef341f4c5c35a48ddb182867279307ae148c669310f0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b26954e9abb77fe3981a70a04b4cfb6dab0be477cc81cfbc0e74fd59299120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d467d38ef61cdafcfcc163e771ac9688ba2952a03605e694fe309e09fddccdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...