MAL-2025-66879 Malicious code in automatic-gold-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b70a8e08686a79cdfde4285355236e09c76078b2852300d9ef6afb9b1077989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68528 Malicious code in glad-maroon-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223b726237ce1ea3ffcc80a32aa796ed9ce6ce12bd37b40a6c219f8945d4a649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71666 Malicious code in xenacious-violet-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bccd6569b77bdc326dfe1d9ccad185d437ba11ff887fb3ac92e5f87623893eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69043 Malicious code in key-bronze-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918362f96b1d4bd3f7de44ad53beb5f397524b25a8ca7603534e6e705049763f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69966 Malicious code in precious-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a868de798424f93e115ba5b1142747f04d89aec910d57c55a7cf48a5e9f46feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66650 Malicious code in adequate-white-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764b6e412e43ab93f8173f2d4ce2680beae95dac5fa4f020ae41c4f9ed61d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69501 Malicious code in multiple-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ca6c14764f9e4a5de0f6478dc1f4c564375a16f252c32483750acaf4316c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70974 Malicious code in supposed-violet-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716a517adacdb1b1bc7bad95b18ad4aa10f700a7c568a3e7f430c18344f367d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative-salmon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ea7a48712e7659e37c8c0fed2970990a212875866f0b3e418cde7fcf18c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous-coffee-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff67102627342380cc50b670a8b1ed5de2c476d25ecb6f45793e846916e64ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4729d0dc4ffc6f2d98c535a6c284a54ce33a91d23643560aae28d4fc9591f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future-teal-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b326b647334f84af5e3ed88b612469105b442e51e45ca8a5d8f93047851a7506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-coffee-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080e2572a8feba244ecf632934ee45b0e8cce29cd999eab4cc99a14748074874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble-cyan-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292d3238300462b88a379b868dab0dbd1faf683c5f10337baddda35726e8aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-blush-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01dbae6dfd728b0d2e13f66a442362a30e572edaeeefbac5beb4df804e25529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-yellow-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c881519c12a22b4922eb18d8c33b97c162cb66ba2b998b37817a850a5ce4547a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth-maroon-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9c81d7b658a116a5bfdc28be2c2705210e32f041421b526de78b2f82459d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pinkwolv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa34ec5b6f6b0ea500b6738f925de323e34297f13690e7d8b2614636f19f8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/nebulanomad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db67568dce6e7268c338052b70b603f10c69363ea9972f8e3a08ad824abcdff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...