MAL-2025-67034 Malicious code in bottom-fuchsia-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad6fd6a98328f8630cddf652ba80179bf8d430e0c20a3b2da3c6843e144a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70473 Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70323 Malicious code in renewed-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14710c3ebaf6a17c6ff7881fe33b4c167e029a49b2bd73db8112103863c5721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67390 Malicious code in concerned-silver-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b82a96891e7a918e290b4e6b546742a6040b4f3e5816a01230358ce753bc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-amber-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dfdb46c6eb9f08bdcadb9b223da6c1e2d4b5959f73c8b1c72f88b80f9756ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-green-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c0a66e8bf4723c17b02503e8649d2f410b96125c93fd6997d2d569d7a7f87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-jade-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb414a397d4e983d8b94a560ba15581a53e3a678babcf905dec91b369813c117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69357 Malicious code in melodic-gray-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963534d98e1a567e13c84016da28e0a487211dfcabdae487c40d4ed7219a9725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71751 Malicious code in ytterbic-teal-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc4be4fb7a9d0a0c2d93426ca7c0eb78c3ad9e4df4f360defeb6ae1059307eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-copper-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1f98dcf328a617c8cc9f55dce067227ae10817184a04bbd903d4cfb7a8d896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal-crimson-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d0c014b996150dc2f6e8c6ce228264433db8c5c00d3343e81418db0211ab16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany-gold-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706dc06b6205bdd094f821db91785f50592db44483eb2e5e9f4ae71b8dedd085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in far-jade-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d2eb9dcc65c206e3f5055d1d6d2a04064156c054085c3b775582d2ce31acef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c259c0f89aff7f17c0063923afb25394201fbcbdd2865660ec945c6b8694a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67614 Malicious code in damaged-brown-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7e9ad811ee7126d7567fbe41b823891984378f252e95a6e598b30e8a8f4249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71156 Malicious code in tory-lime-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39dafa56f50110a57bde94c2e58bf86483cdf06af5bb390eb09732172e381b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-jengkol73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a06d12e28f22210f57a38fbe43ac9508cb209d8a3a082d374ee815c9575f853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kue76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211541d6d537044b0c9f7593b91a64852246776a6724d54fb7bfe2c1e8114546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66339 Malicious code in yanti-toge21-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d36efc8ddaf80698e32dc94b26a315f3064459997c3660a348fcfe1ce0e49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62438 Malicious code in developing_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4650845c7bf22ce345375c5ac0567f81e85dfb23abd170a33ae0c139ca6cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...