MAL-2025-70583 Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67748 Malicious code in devoted-beige-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1f32603b4edd0f5946aced3e79dec68eb332ce839079f1eb7fbc26df4ff72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artistic-white-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea4ced7703f865b0cc4ad0aa33918b148fa3afc826ce44012ef3a8bfa0e29bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-blue-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9d304ca359d44fcff19a25fb5dd3f670b372bfcdbcc0630114a022344d1a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main-harlequin-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1767d6a1dae8b63ee52a05cff4533172b5e22dca051ee0110f65cfcb4b8c9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital-white-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eac7a67c6980ce8a5e0c77caba35bdaaa225a1d6e34c93d0a7529c92ca1b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy-crimson-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835f31edc3e48f86ee2fe2461777944d02609f4995414ed7e0fbbdfa1f8db968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-black-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302076df9010268edd1c2b746ed68eec2950df4e8476a2dad81167a29fd9ae0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical-copper-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1354ad7deb27115bf8a28b709b1627ce48fd9b58db160f5f97552d7993d1ca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-blush-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427fe9169032b942c97c8ad6dba0a30034269580549104fa4935749ce3dfe045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb369be696eca3294e5c7bd646b36bedda460ddf2dfc2a325526001a5debe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous-cyan-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1022f49cb9a6482d367456c7f4b2efb68e49b267da672dc7059b57b2622e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat-plum-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac523543037977165eee48277cae8ae6dab92afd8fe774c4a4f1553b8a8c78f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable-amaranth-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb38e006e879ddd07650ba637225d24fb18505b17897ae6d9c247d01567fe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic-jade-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc326f863ae1b00cdec8fd7a9a02ca242c7798579274c0140ddd89e9c2ef420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60b667e6b7ef5491c0fedd90407e11fe537c159ec954e52a83d9be246aacf75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-silver-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cebe2d7c5eb39daa3a1bbc9bc29a735f100f447eea91f2178e2d5d955d8fee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67892 Malicious code in due-magenta-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d07851735986648d4b300a02275cb3ebaea9f5bac02411cdf730d69f3fe57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66743 Malicious code in allied-lime-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f5367f8dbf65e345182207060c2655dbc0ae20fe32e1929f6648d4bac6d834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70270 Malicious code in related-salmon-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfece147277f66e04227a53d31516d773e79810b9f5e5dead4326db92009ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...