MAL-2025-71189 Malicious code in tricky-indigo-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b8812da6a188663d41a20f2d5c9fab6dda39dfa2bcffc6a9a6898912731d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67662 Malicious code in defeated-brown-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdb4bd13f546b1d20d5210cb4d24f34348f24f433288c54f6dd47733fc681fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69829 Malicious code in particular-red-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5575dd5e1c15fbe19dc7886e281352b4acba6ba3309e0e3c5aac4c02d286e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69273 Malicious code in male-bronze-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ade0606a2f17268e3219ac5dfe59687f358465ed6f11f3262d0766f261994a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68896 Malicious code in initial-red-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3c92896e161e5a58d2608703518b87af1d886e2a43d57ca1236b9ad114244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68376 Malicious code in flying-purple-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67dbfd4632c6585f40553d87f1ebc341531505b5ca0f3bfc6edc07c3d99e8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-tan-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429fa8c6e39ec08179011487be3eaf3ca4d384d4d8961488ccce7b2a99e87c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-coral-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c89e19e997af573efc8424b164ca65ac01c06b0cd0613350d640c0022a31d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial-gray-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3af0b5f3b615de2a59bd8156ba8945682f6d3a2468b3baf8bd61914c04dba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amaranth-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1294a944e54ed5aa67c36b18af359324b140f69b8f411f1fea3d3aae1f03f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser-green-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d75c7d6c08a0690819974cbcd1ba614da9ffbfae7691268b5bd7e4828594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic-lime-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55265498f9cd5c1198bb5eb954fb63ed37c9195ddca2b656aeb45d6f55817097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-rose-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edfb041774f8e3e6273868de12659f2cb6e0686516f1b2a7ad6c08d17f6c634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sick-azure-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ea2ade6910708dee30f46c0fa141d24de55fb2fe8fb19ed4d99c9da79f4e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant-pink-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3cb8405943aa54c26cef60d1396a333ed534ee5e38964f2150e4161d0ce3b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-maroon-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ce8006ae10635ff970f030ab093c0e447bc015f9526ff64326f8fc82534d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable-aquamarine-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91254bc229db6339c558fa5f160f496e4ac09801fc389f05803086215b3fcc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-emerald-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee452ac1283fcc3857be723197277f26a4c668ed4084910c0a1b646b9a8d61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-white-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb42abe5dedf95bed57b1a4d6cc51b8c6c795e1064ccf7d0782277a64069d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-scarlet-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19268117ba07232f52890a4c8a77b60d4aeaf8e7d94e5e2249e7640b8b9edec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...