MAL-2025-70495 Malicious code in secondary-tomato-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0917210095ffc5c7a3f3afc4f4ca3a895adbbf212de97db28fa3f9a8840470e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71382 Malicious code in useless-tan-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46c3e4bc81f78f8b6eb7108ace98614c5e286271b451a7c377217f587ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-black-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85613dd75c60a540118983bdeae25c457aeccbf85f9ae9a8e702ff2c22424e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-black-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d9acba61372f89fd423c07756c457ecf75d21cf233e9168ef412bc45e36617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional-yellow-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed80c92353a50938d0de7980a6a259bae464fea0ac6ef70f6d887fb1435854b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-olive-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0940f9791e0d7a41a57b3916d05a6362323a0d6e840d65a31ada4a11f4225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent-harlequin-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ce62ecf856142c7e1b37b62c3c4983ed88417c7e1830c0ab065e9a1d77c7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-yellow-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537dbe03284c7d8084295d89f227b56d8139b06a2025391f37abf9ea37cc0d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-green-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df995a84c13dd54c1bcbcaea9656dc6aca5a8b5edc7ad98167b5a6137b5d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-blue-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855ec46d32ec3b98e4ceccfdeeaa05fe4fce0ac347aa7b29a0824983dcf1b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely-coffee-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6888b7793daa45c8e25e4ba636ceab1f3442f3e18ac5a06219afc6adc5ff70ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored-tan-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f75aaa18f93d307754913a0231665bd25436ae1d9674242873f10bb395dbe4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69460 Malicious code in modern-peach-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c60a346d5b0bd892399ea8aab34dff5d543cadc59e1cd9f08d03bfd80cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70551 Malicious code in sexual-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6151914596df3e7fbc5bbb5b6e9bb4d0dd14880e46382f26ea90ab5e15d023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-gold-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6f454531c2af77305c8ff92e62e55fe1418106c05863cb11510198e7bd0513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-telur48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2775fbf3aa5d0f2f2d3e6641fa8077dade43bd6962f0019ce712680f21610dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-lutis20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a21ef365f8aef90a7628f8c11f416fc1d9752857058acbe5790afc861c85b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-mie92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbeaaa4e612bc3b2f24d1df009103733b5c63cd4361dffb12be2a64edd1e5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...