MAL-2025-69835 Malicious code in passing-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faec7ffe192268f38491e412d62c2f6e52c4f1006ebd173f75cb1f7c32f565d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69215 Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69315 Malicious code in marvellous-blue-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad129a96f36d6dd1b459f9e2f9f7a64fa1a9c5436300936786a9f61233c2219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67689 Malicious code in definite-scarlet-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7039ac17ee7f98def7b4eeaa09fca7d3fab671a48f3060243e26e0f5995cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67355 Malicious code in compatible-coffee-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deab9a33349ec80f5d9d90c701ecd64b55938c0c69fe0c313400125e2fed7c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-lavender-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a49d7824829ccbcec70709427acac77d9eff0800942d1fde35d0872bc00fdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous-lime-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3551ac4021bd375205d373cd6cbe9b7c46633de9c82e8089b95da79f0d0b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-amber-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd56d161bf64b116fbd1631fc4fb48842a57f404f2eec5c9d333034f36debe70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-fuchsia-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be00cab3bb89018b651ab94919428f46b5fab53fb33ec5b28ae195fab5684c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory-purple-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d1b03182ae210c473438e4a7306662d33412fd22f735e7d495508383cf1315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-jade-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1f2015f8f6f8b4032ce4c8a540e5d1964f480bda042228ef760fa60d4495cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme-gray-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ecd1224fbf22ba9f8df24f20a310fff325db0907db89685c9415b78231de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute-green-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c372766d52d748c66e571b7225cf77172d1fcd0531308b79c3483962e6ef51a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-chocolate-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece94d09f87ed47b7aab12159e5ccc37d8feae1c28a6da7c40cd19a774254722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected-tomato-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c818ef8c96f71b5bd5f5e247edb25ca30cbff584daa0107d3a581eb908e924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-cyan-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fca3a7b462db2e0c9bdd74555f00f28c29f87cfdc0f55b424281c3bd93ae4ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d90f2aeb82d1031d6afdcc0b35f93e1fb5add24a91dd8b233fe07a15e6163f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-coffee-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4662108a78b9f5f79dd22075635cd5e5a267bb14b1526ac5cd8b633c60b6e348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...