MAL-2025-69144 Malicious code in light-coffee-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a8e6c936fcaeb396e096a81d0ccfb8256f5b5328e3dc71baba7b8a729e646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68384 Malicious code in foolish-fuchsia-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab91fd12ec137ccd80e1dee3869954781c6826cf5c774b448941f750944763a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-blue-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce3a6b781794cd41a53760395112e1010a0cea5be63f15b2bcdb0e9ea03e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67974 Malicious code in eldest-blue-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3ac34afb6cd8122c3798387b9662689e060aff66fd75fd69b4e4c0daf940b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70221 Malicious code in realistic-lime-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ef87d9ab3037ec5306e98aa562b06066f5d958ab41dec3b57a9b9f2cdc09ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68806 Malicious code in impossible-orange-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae880034a2cb679bef3088915d85f8f10680a68c812e4b367dd6e7346fe30ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66947 Malicious code in better-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86a37b8840eadf6ef74ff1d3d364d711427bd0a7c5fc9a52652b12b74e7ea3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad-apricot-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a83631e94411546becd53e752f452403d936cc3442d116709aabcb98f58dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-plum-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a28efa351aef74dbb07c7ddf4f5c231b701adb5b7c7d750c5697a70a3953233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil-apricot-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4652a58f2e9bbf7fdd18bb1bcd9cdfbc5f544cc85880451345043c9e6fefb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-harlequin-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4ba85309dbaae23d0b6ec75e14d0dfc8255801a95ce5fdc28518464b62cd3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty-amethyst-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df03eaa61ba43a8ff44f016d8cd1923c7ac2d1a20a13c7fa8fcc08ca3374097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely-gold-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385f65114f12a317ddc73f9772aaf353ad97156059bef28f5130eaaa0f3b4780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy-gray-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7927553b66ff1c48a380f5c3979a21b521ca7d9f1a0a31d33f8b232659320730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct-aqua-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14191ea5084102a6c7a6bd1a8a8560041720195ddc7c6a51b6489235e1696f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creamycandys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c38eff63f4eb50501cee35fbef8241a227f91bc47f10d42695c77529ae4ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-lime-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595f426286d5903dae1cf95afeed3b0bfeaf59810df3db860743e54ad70509a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...