MAL-2025-66809 Malicious code in apparent-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c312a31c8f76fcfdca7982ee4ea8c4c54dd86816c1f44f2651bd27c717d672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical-tomato-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f13070c18d0c734f09a1ef7a5eedb6f879c4ee189726f3733562081e34fdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite-aqua-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f2287692e40c7f9b1e99669f3d033298d46da070eee4a5a5160d0c457dd9a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-crimson-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c12bb56bace184d324c5207fe72726d18970c5e8af1ad23b73ddf99a75dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gross-scarlet-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66ef336dd759a69d1aafcac8ed70ebcb24a480e4214d4ceac52a8efb6157c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-teal-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035f9e0506da9d5b161711552318e4deebf8e951ced1189e9880ce4006b30343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67432 Malicious code in consistent-indigo-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5aa96f872820a8af0cdeea5c4d75f956818cea2a1e69f0715d22c0e90734ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71065 Malicious code in technological-lavender-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1666ca9c6f38ce533b9cb5b0eb4646770d7d2bb5718a064c2f56307bbe5a3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68761 Malicious code in icy-sapphire-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520c16d509ead9a0619d9e283784fbac12ef4695534aa88e252a532a95945429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66565 Malicious code in @bipyruss/radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7b7af17b7b59d66edaadd9aa13195e7886b7e23905dc09eda5ccc360d2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless-coffee-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a979306220e6542b0c8d69f78472cedcdee4b67e7748a5a3a7af813a4e085dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-purple-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66320ad6de3599215aa109f6cebebdc1f8e71f49c8b848ab4913658d105ee39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random-purple-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393a3289a9c1933113b8921671770bfddf4e0e7230e9fd8dd70d8a26cd9a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd1ab3b131030644d495da62cd912628c876e2afbcb31d1fbb4cb56d5b2bdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66660 Malicious code in administrative-coral-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b263a9b4ed0aea9432186687952c453f86cf5c615bb120a6eebaeead0232ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68545 Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67366 Malicious code in complete-pink-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfa16c4881b306aeef6b78feed7487a85aa552ca7a64d27571a812ada3a3a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68207 Malicious code in exuberant-lavender-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d3c5dea5a58399e0cd9fc5bf0d97d3d3c8f83d6702c46ff0dc42cf587de595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68926 Malicious code in integral-crimson-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781c1453c4b5ba6cc337af27e030efc0df4edaac77cabf347126d79938f8f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...