MAL-2025-70774 Malicious code in spiritual-scarlet-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc977f87ab9dfa5659ad5788efcb026e0cbc95e29c00b0f6c84044daa40158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70279 Malicious code in relaxed-coral-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3589a5d770d47f3d3b30349c1143360702bf908c298903f36f82c2454e8dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69229 Malicious code in loyal-chocolate-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c78aafe60d51c46f2d6020db72b2ef107eda61abc83946653ccdb494f9c3d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-black-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3476ed856e550997e83958ce62d48f1ad159294a349c30473a2deb117168d114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70770 Malicious code in spiritual-amber-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93d46a712db780ffbbbf3a7557bc077e681f4c01fae4ed40431cf95f3bb9788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely-coral-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505398836fc6833be1b6f4768a346df025426b185b1d434892f142cc84f8ef91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c1b77f2f2a8a352dee0e5843d55a43942177284d16b3cc2b98612817f80cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied-rose-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d644e3d58ce9e42c5779266e2bfd7d4a037c943fd841ef2e8c85678c61543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing-blush-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5eff7b79325d4cb727e207451b82a926f38e6745584fc7d8e41526cb358991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-tan-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49884d27c85e2c5e78e2ac151717de8f3b263db8f6b8a0c0f1718a2bc67ad93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-amethyst-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defff1fb09bc6dbacacca8335ca78b40236f8f5bd8ca59760de05e9925bb2ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill-indigo-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b30cea900f1631201a6a311183ede185a9365548fd258fb64cdd5147830b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy-brown-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f893c3972aa0d3b8e803417940b528f11557b66214b86203d5e18aee225e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-apricot-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1e83f29d8f3a617ccdaaa4bf0dad5e6757c6bb2b5ecc3872b4e0007f707d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anxious-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8e549d9189ddec050f333731458c51f66faf37fc1b70d521cc0742c68e629a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early-salmon-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713813cd0ecb1bd411ab7d6f955d815f14bcf427cef022fe2986bf148a129ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-fuchsia-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a2bd698cc48c32727b3b8fcbbefc96f831a463b6caa25fe2e186797281471f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange-turquoise-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efccd9cc26c1c59aec3842cb453f94a074ecf8697af5eefcd3d37a0062acb402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...