MAL-2025-69835 Malicious code in passing-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faec7ffe192268f38491e412d62c2f6e52c4f1006ebd173f75cb1f7c32f565d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70487 Malicious code in screeching-amaranth-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc43f7d71cb632ed8a75fa1641de61f6f3058563e64f2b03aa668425cc37b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69792 Malicious code in overall-coral-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764234f26ee09e5f80c02e91028ba7f033f7b885891809074172c51e93c9d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71546 Malicious code in welcome-white-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa42b5c9aaa5af0f4fc2a89efb7c94bf0552b379f81d660b6a2672eaab8de035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67689 Malicious code in definite-scarlet-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7039ac17ee7f98def7b4eeaa09fca7d3fab671a48f3060243e26e0f5995cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67355 Malicious code in compatible-coffee-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deab9a33349ec80f5d9d90c701ecd64b55938c0c69fe0c313400125e2fed7c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-azure-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926101d7cdab3a580aa8ea8c0fd34596baf09a538a6ca6ab143a73141010693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-amber-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd56d161bf64b116fbd1631fc4fb48842a57f404f2eec5c9d333034f36debe70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute-green-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c372766d52d748c66e571b7225cf77172d1fcd0531308b79c3483962e6ef51a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-lime-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611255abbdb401769fe4735aa9b433d2a53a4ba84154447eec666d2a4ebb8b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-magenta-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605344ec81b17dbb4b0984a15266fa660dbc67a062fc0efa64be6706860ed8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous-tan-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0d95ed24a0bfbd87441fa199db1ce78886b590e7fe03453bac0a28090b1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-white-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9205c506b06060d964a390a54f5c37a98c42e81697f27ccae973a907fb2ed40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-tan-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edcf07ffc53029cfbf12e08c7f91b52c74bdd6b433415f46fda3c31368045e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-gold-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2205c93dfe74e7ea41cbe47475ffcc62cf7d136ed2bdbac95da671dce46af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme-gray-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ecd1224fbf22ba9f8df24f20a310fff325db0907db89685c9415b78231de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-fuchsia-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be00cab3bb89018b651ab94919428f46b5fab53fb33ec5b28ae195fab5684c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous-lime-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3551ac4021bd375205d373cd6cbe9b7c46633de9c82e8089b95da79f0d0b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...