MAL-2025-70765 Malicious code in spicy-rose-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36b2f8879c9e35102e6927f0666f5cb449516fa714b607c068f964f0062a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-gold-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61bad47b0d5de42a99e5a8f18c2e50c6efe9d5dfae230ef2f19446a1d3a964c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic-ivory-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410a155785bb0c8fe3d5b52615db7ac4aa03c24cb097a41a5a0697046c99e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14710c3ebaf6a17c6ff7881fe33b4c167e029a49b2bd73db8112103863c5721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291f0573a7944df5799ab3f9d6a3cfa62253779e4de8dd021611b2a932118761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united-maroon-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1280642689393e13dd5981428b4c0b46f7605d9eedc9a9ef26f5847946e9507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-magenta-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6750846f1d3fa02cf5fffb1d59a38ee0d63a00c530eea13a92ec8d82b7b5f25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful-cyan-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ffbda65075b94448c200e0f2005d0490d765513593d20b41d3e54319783fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset-magenta-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd465043101730d099d86c31167441fe11423687e0042e3218237f6f57d79bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken-olive-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701c3b9151f568cf54840add388d8e29980990fbfb2d3e9892077339aa50e29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-green-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272fac395ed048e4b4912a4bc15bc530d6f90e4f953123d2a78b6515b78bf641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70960 Malicious code in superb-scarlet-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad566814aa021757db165bb5d59567e4e35502b0942ce1e0b9a5e5f9610a90d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69601 Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68348 Malicious code in fixed-amethyst-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f1bf92c3027d74632b1d1eb659fba82e6c3a8f815d9ee9262eab62a077219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing-gold-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889213d56f78d509aaedfa44b21e33a6e08ed29068b7ebb9aa8d163ab4e144f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68345 Malicious code in fit-olive-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d49f5f4d4558f3788ce82a2e896cd1e2e84abf89af33792e5faff81af79c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67087 Malicious code in bumpy-maroon-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2c1b1fe29ff898d9b17478a847a6f1e446e445cb30df8e02620efd17e7c9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...