MAL-2025-67135 Malicious code in central-lavender-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f423e6359c5c08c44d546e0dd3c88362d4572128b43a53e8650cc545cc3152c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving-tomato-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a37ea3d6ea372234e6d87b638d7b67497257254184f5f74fba0eae46629f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-rose-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a45eaaeb696a35d74b044628f2e629befbc5e4b56040e65b9255c7e0a5f921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced-lavender-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3893ac8084d01e4ea3795cfc90876660bd655bcb2e365c2a54c2a391517007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic-yellow-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d6dc473c3432799dda2113a4c71ece50513b5fe169147a0262b87757e88dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-beige-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784dab15f4c60383866f39657360b3a6b39b1b3a861c779c27cba3863a49432f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in freyjaa69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70c49d60577089c32fad8540409e57a42b93499072da56347f5e5c5be356e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-tomato-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3633b7b8363d76f021feb7a1f9c01309a94b30f4b227f45d2d447fe8ec2b3239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-moccasin-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0ac61e39814ee6f27a08ad69584179f5ab2611a8a29ee34486db64a8378398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba0c8c0ef31de546b826e9a644184270d18cd0e8d297fb1659928192786480b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant-lavender-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d61ab6e2e6315ea624ace1a8228ae93e4e1a6da1bdfb6004ec0f547d8361231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71588 Malicious code in wilful-bronze-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2e0b7bce9f0af9470f99ec3f850ce0b5506390913ef6f450e042e5087cf57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69234 Malicious code in ltd-blush-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01dbae6dfd728b0d2e13f66a442362a30e572edaeeefbac5beb4df804e25529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67962 Malicious code in elaborate-rose-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89775125289ceea2f67ff15806b219b748eccecf8e0a0476265114c4ec623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67992 Malicious code in electronic-chocolate-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7a1e958b252cdc7dabe16d42149a85e0b475c76d193625e2ccf1a61ecf621b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71661 Malicious code in xenacious-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f769e4fdd870fc90cdaa64d7fed81c305ad4ecd812b5c4e105ad6cfde90c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-olive-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2936099ca0f61c01b1d2fd8bd16edc72c5a4aa64bb3f78065ffcff5c00239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67245 Malicious code in clumsy-amaranth-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc64303df9e6d6eebb7efa0bcf00bbb249e597cb2f279f2c32bdade4c516064c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-blush-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01dbae6dfd728b0d2e13f66a442362a30e572edaeeefbac5beb4df804e25529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...