MAL-2025-71353 Malicious code in upset-indigo-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfd230402a7353dc2bed37c90ff25d2275ee7279dda848420d91b8a8d1dc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67189 Malicious code in chubby-gray-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e9bb5fb61907ef6fbf7a1570c87e18dc26d07c55189767561aaa3507c4ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67925 Malicious code in easy-aquamarine-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6c18c619cd656688d7ad731fb0fa6cc8f706853a45b7275c8b2890e51b6cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69498 Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated-plum-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4cc5602110887b833f734dec3a67c46678a8a982b0e607e4434b2d330c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy-amber-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d51d04a14711acc3e5341977d5e9af8863614c53ae5f9b86ffd73ad18da1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70592 Malicious code in shiny-scarlet-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9451deb22f47196f945a4d8d6f86101f44adf513918be29fbf67c971ed17c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69263 Malicious code in main-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973c9bcef0495fed11524b4d8ce2b8c43717c7bab6ef874b81a526bcc5a7ec52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71249 Malicious code in underground-black-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b22e3d02456649490e4218fc1f205ee57facfd36fe7585f4ed7a5c226677abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-gold-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2218784cc7075d10081552114bfaff01ecb4722a47dd8182d4e4b8152fbd6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-pink-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b877ca4616991a93d8577b2ca60cbb3eeaeaa2430a0fcb96edf746ddc0dbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big-moccasin-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0327b44b65149ce34c1053a52bc8438d9395b973fc584f3e01086bbe4d4d7a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-coral-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5330830e3c363c962726083d936a6eb6e7347f2e7a50824dd6c334b27564136a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff78b3de8a92f8ea5a05ce91db4b9cf64b73603a239011682f515685736c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable-amber-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35032f1e740f359b451e6e7d4618a5eb198315fdf6b38e5e3f30a003334306bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c7cb59724468e345ec22cb0e663c032f176fc9cafc37dbf50353bece2c38ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing-moccasin-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bd94da847b607fe81a06ec19cade1c48d7174b1406c524bb306af486793c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male-crimson-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f97e3f5ac7b7b86d4e330eba888c0ca68a972443662bbbc54ba00fcb4d4db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-white-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb42abe5dedf95bed57b1a4d6cc51b8c6c795e1064ccf7d0782277a64069d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced-purple-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b293ca94595749b186dcf7cb309dab9c1452b211b5bae65a436fb7206170a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...