MAL-2025-67242 Malicious code in cloudy-ivory-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cf5ce94a68eae86c6df1abd3ed115c57484fbf22527287bcea08a58cc42b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing-gold-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889213d56f78d509aaedfa44b21e33a6e08ed29068b7ebb9aa8d163ab4e144f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-blush-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6be8e8a611a4c10be1b762ee7b83a9b1948a4bcc3f1ead38c2a3e57a869e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy-jade-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dcf304dc68784905c37c70890c84b179b10e9a499ae3134a5b53e062c48f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling-teal-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612fd801148ed5818c5a011418140b35015894a1a1726ef58fe74f9622a66856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fcc62ad7a18c6227b16961d6a4115d7edd8637fc633b33529bec5fcd49bf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-green-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29936a485d34d73872a7532d9f1be19c895616ae7926c9ff91f63961670fee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-gray-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef79fe8cfe0b4a72c5015d70be6b83e73d78e0fe38ed0962e90ef1072efa796d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal-plum-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c62073ec70f75b6d76ec5ca212aa636c435049267496cec64ea613dcbadbfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-indigo-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba99ae7c1422e3987e32a11ccbee5a19f7d32328a3d9d113586ed4606b9b10c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-moccasin-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7116cf3cca47e750372c804d17d43767c637f19cd73914c1866a3bb7f60c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intact-amber-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665b15f9b06df8b1a5bf72eb18d44df10b157a976c3f6e8151c4b0ce71295a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-silver-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ffdd04653ce3f44f0b637e9c7e5793d80d96021265f4d4b3a1f1889fd2831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum-sapphire-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5622d9c6b8d9fd497209a31da78aff6efe7342273004d8616697762400679e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous-fuchsia-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cff985bfc558dcae248a99dbbd919ecf8abd42ba3d711acbbb11078dc244a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation-olive-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ceee49120441d56a775da6733f3f392ce0c2bffbc5946f24f8210e018efdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social-red-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc441864099719c1b972e7e1c5054dd2a02c9dcd24fd1541d91741cf907efc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparable-purple-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb2e700d404a88b007174f866cb68b2430d139e2e414da16f2b386e53a16bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful-gold-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c1490c179356d8f1ee83ab71102dea0e36e7478eb9bf5a6b7a8370e1431ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...