MAL-2025-68783 Malicious code in illegal-silver-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b544b2b20b0860cd4a305b941f4b8631675f5e947f73b8a191d41cec5127b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk-salmon-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe27eda792ebcf2691e5ec126afc5621fc251584422ed61760dc7a1186c0f99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67269 Malicious code in cold-salmon-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a821e608160cb4c5b516391a3963900f8884b5b849cba50002d4ae14a481919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70267 Malicious code in regulatory-fuchsia-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2042aa54307128c903d87d2f038cab374b5df3bf6fda5c1e69c22106c4faa8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional-indigo-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0619a155091588b311595c85c3910c989677ba113d2a5e274253d939be4dc193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1719c0afb6f9683434f5f9bf17ee5ba0cd20d4ba4420ae18a18800195861d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theorhy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15d11789092dac8ac08e646da260e8fef749f90da1e550d356cc8709d0d6766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632f867a7ac504ac32684c53046fd6d1a8e77928d78692a7855aa99fb556696d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d797c6b5d780b00267c0ccff59140df7ef7024c8fc7b966c6f40e6b7b671e039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-magenta-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8a005f29aa7a2413c4e4e147c1cd5f83d1dc6f2c0e99a82ac8171e49c5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flaky-turquoise-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300412a4a365cf086854f146429eff5a882b5adad392a53b18ccdf88834618ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-sapphire-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e2a6138e7dc543d3d60e75715fba2864f2b4997e17120a6a4ea39bfedba57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71280 Malicious code in unfortunate-emerald-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768e8fddaf8b6ce129e3ef011115e0cb94748f495f2df1d2bce1ce2dc5b99cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71116 Malicious code in thirsty-silver-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e740a46d0c73c4ae024708311fa4f0e97d107b8bf6fbae9d047735e58bb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71662 Malicious code in xenacious-harlequin-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fb50e04607bcbd3966b5b927b82365f2f87c2f22bd1e627c81e0d27545341e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67048 Malicious code in brave-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d467d38ef61cdafcfcc163e771ac9688ba2952a03605e694fe309e09fddccdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70183 Malicious code in rapid-peach-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05993d1c539cee9e85900d0d276da3519aadf7b3c6b6be19bfd888a0b4062f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-lavender-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bb821481b582ce7e85ec94e08a8ca0bf3b8d703c1815873b6a1d70f8042ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68782 Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...