MAL-2025-70165 Malicious code in rainy-gold-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66873 Malicious code in attractive-violet-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5310dc84651e474da95552a9bce3efb22b3b5131de8404c8bdcc534b9204d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68113 Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68924 Malicious code in intact-beige-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f40bd00df3fa14afd0e27eb130a607639db01e259743e98838e97a8d424ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68488 Malicious code in fuzzy-jade-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a5547d211698db23721e0e4ff542891245c289a45f626652394dfdf99e6644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69781 Malicious code in outrageous-crimson-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e316ea03ac81c7e1dfd3523dcf00b64023c38ef69e7eb76d97082ef7c56589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political-violet-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4f145c201c8c2a3eb75e5cb653aef95cde826439e92618f4da115075f1d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given-aqua-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fdf20206722798caf1568c47e9bb222f45356aab9e739fe6baa55129e69a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-copper-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d19612d963cde1e745732f0bce077c191b1406ebdc0270f63710f8dc1ece886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable-plum-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47b21979d4eee5217f451c37e5ee4ad692e81b27906507e83bb9723ad7e4b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude-tan-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ec296952f476fd14566f1d9ccdcf4691d71a42ea979e4bb1f944ad7c9b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-plum-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e570edf098ff4ff8ba812c1c9b406057e1ea61acf5529d436fb67df83c70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b32c6a3f358c4252a5fcb7523371d25da02c59293169cc3411d8243df525ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69603 Malicious code in net-black-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3552019798c7a3e5ea1f44e788da4b1cea096bee5c584e27a3e05732c48e0e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-violet-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea795bfe44fe4667cc7c648ba9aa25928906582ccdb1a9c9108adc9dbd41eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-aqua-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4ee86280906ffe93666dba0480bcc05a4e270ffd2ac98ebee38d067c9a329a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-olive-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ac10842dafaac29c25240868e9f716fbc18a8e4e8dd28f8ab52982d5363227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national-turquoise-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dddc68b828f992621dc3ce6210a86f67c0fd1a20a84713ced490cb49f407b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden-blue-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18ad4a44059541fa7416639e47b21d2a290bf12152e6e502b126be13b46b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-pink-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb645def62edb4bee8723d3d08a9108dc9c12888d6c28e11632855c35b2d21fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...