MAL-2025-66562 Malicious code in @bipyruss/luminouslab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18a63a96569554dd1d59d538be2efef522ceac3c83f85bbf79a6befb6d16169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69212 Malicious code in loose-indigo-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368b1107a69b30edb618fc199c164d6a0e7acfcd82d14a8f23b751a0e6f4f9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66565 Malicious code in @bipyruss/radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7b7af17b7b59d66edaadd9aa13195e7886b7e23905dc09eda5ccc360d2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-amaranth-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4c1fe1caf03cb83503baf79cefdff343f4819d9c2db75d7376479dd2a9aaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a281832f582a19431f5da9dd80e9d556c29d4f7c0423f55eb66cfdf7996dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate-red-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23584fa1d22ba703f141982ea5aa0e529356db93ca2a95412ab1ba8a71e32cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9149d6e69ecde9b2b2bba6d96e3344b404209f74dfd4a68e03aeaa250ad58d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine-peach-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e9a7f5f984bfd443fa8310d7dc40e62e42a070c5fbf7fba37a223fe4193a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-maroon-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae7ffff45f6462ee052333e75268751b29cf8af656df9ec8a8c8e28c53ea070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53932b71f797bc22b1bde0044f33a0d4b5393fa5e6f2050c4655af034dad98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random-purple-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393a3289a9c1933113b8921671770bfddf4e0e7230e9fd8dd70d8a26cd9a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-purple-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66320ad6de3599215aa109f6cebebdc1f8e71f49c8b848ab4913658d105ee39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd1ab3b131030644d495da62cd912628c876e2afbcb31d1fbb4cb56d5b2bdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-amber-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7ed5737d0a27de22db1f7da9f3825185f42c51646a799a6a41ca6b78eb44c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running-aqua-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e020ca8a7a636d75f70ad620248ec44ac6a0d856a307afc390a2343d66e1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flaky-blush-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431769404a9a8f35c84ce32881d885e272581911b60c40bdc8a75f8b544a562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-red-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8452a9f856592e29f975f1346644eabf54a04d55b1d9122a6d09b32cd66ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human-moccasin-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6864b120e16707f5aaa91bd1db22022164452ac52fac076011253d86d080130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...