MAL-2025-70072 Malicious code in prospective-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23367ec341fa7d5743420f688d03a77b9b8ba1e189513112275bbf4437882fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental-coffee-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c6017187968e55257a37ef5d357479dfb6fda4c2438d644d3763dd8b6a35e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67714 Malicious code in dendod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64de38d8255eda87e27502e6784c528160588ba5fba5047e5edcc72e2f45555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45c4b7b6a2d5334851c5e6ae5127ba4fa28e23c7b847c3a4d57bdf7e058ed17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66824 Malicious code in arbitrary-apricot-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbfa978e228cbef1cea3b0e9dbab1cf04eb98a63d54d4daeb22794fc55b6441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70631 Malicious code in similar-white-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206529509c3f6e07edd868395ce1bd615fc2b1853d189fded8b7fb940f1db7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-azure-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290eb5527ba978d9f913d813a34e27c4b6df326e5a2f5459023cdc92578da80e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71596 Malicious code in willowy-peach-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae21e7bd121c436243bdcfdb66735fc3a2eb51032dd2a3d2c8e17d8c524acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71448 Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff4051fdf3eea130cf94298a478f92539e77f9aa6b9c09f85b8b1e00f95f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative-plum-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4919757506f90a6d6e21e7d1e14f49efa1619acdb2169b8a0d0c6ddfd4593096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive-magenta-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9385e54d1d98f957ca20fb4494ca8768cf1b4020452177770316d78aa5e9f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mild-lime-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ecb0f1d85049faed3331514d39c1660a56d2f03feb1f2e4099457d65b9bf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38fec78d3735b58ee0cf18e6bda2a2188bbdfb9c911ae3ad3d4782e365220a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble-aqua-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2866c8abc0975ae4b1b582d1986f93595133d6f60c4edf4a62938b5892194b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic-silver-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204aa8a43f8fb421f77a5fe30b1d9853963778f322a39e7283f6e65da503ef47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yodelling-sapphire-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f4e1e23bed17ae8fde64589de97aece70615f7c890851e724f6bf5ff522af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty-sapphire-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b70a577e962c0ab5c74fa4976a934bfe27aa0140d60e0deec0de56b1126aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...