MAL-2025-67605 Malicious code in daily-amber-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639deb11dfd1f7aebb1abe51edb53c161993d7203de5875ef7f6a9da59d04fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant-copper-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9916689ee0b29f725d33f82baadb51df595348753d2cc42ad1ea837ca71519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox-black-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13d274d795d8dae9a245d8ae1033e2fb4b67dd6ec22ba56cec62cd51229e920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic-copper-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ed0dd8bc68f21faf3db2acc1ba9c0ddd760a595b47723b0f6685057ebb4e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool-amber-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f7289b6b962356393b2f15e61c8548c538428dd6109d7cfa4dc71b5dcb92ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting-scarlet-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75c2cb385c52a546c62e3c58eb51ce749259788941929e0f3202105ae7e9868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coming-indigo-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40f204a5529e9dfae74c0411e5f65248f006202aabafeb711756472e6502975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miyool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa95da6580df72388a2b491f52c1756c733e7383660348c461a4a412f66ace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing-orange-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab8b68b8a5446887c6dc866f938e81d030d9e60830121842e5cad1fc8b8aadb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-aqua-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30943f3e119c21087e433c9516342cc24d0b7e0c261c95d8a1e1d014a5fe206d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71301 Malicious code in unique-aquamarine-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29af42cd67c26d4b3cd449d68ebb9371480cb78a5f88976ae0a3a17d67fb718c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71420 Malicious code in vast-azure-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008322346a37a37a986bd65a74d2fb5dda1c01e015c37188a0656000bad2784f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71367 Malicious code in used-amethyst-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e821e1e214cf7b288433ed0ea2b980a6774a126634e7c575b8ff8a170e36542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66618 Malicious code in accurate-scarlet-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cd466fdd3893c4dbfb79ae19cf787f46f109d4cc700cac4122dca23af98b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70287 Malicious code in reliable-blue-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e793517f19c172b55d357c6c94df4b90ecc9d7c4e20f2f4f19b808a733ea642e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70103 Malicious code in puny-purple-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48cbf10f58aabd3749f949ad7013330b7d21cbc0451570790c9ada9791b7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean-beige-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bb34f09cc917a19339fb2fb5bc5c75769b4b286ae12e2f4e65abe4fe0d82c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66959 Malicious code in bheyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0de7b985fcf88296db88eb43477a16582eec079bb3731ee0b6f43a1f001f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66921 Malicious code in bad-violet-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd2e0cec3761605ecb08a23b6adc458b99a58468dd245abf1aa9f7720dfa597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...