MAL-2025-68808 Malicious code in impressed-bronze-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a2adcb1a0e27872b5e4d3a1a845ca77690608003cdd25bec42db4a61982dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71037 Malicious code in tall-white-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ea3e702461cf0b28d41732b2b24b56af2aee8e07ed815f75706eebd4708387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71239 Malicious code in unchanged-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac9f6914f933b76e152088b94448fe2f33b87f806ab67acc80a6ab790ebb859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d797c6b5d780b00267c0ccff59140df7ef7024c8fc7b966c6f40e6b7b671e039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional-indigo-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0619a155091588b311595c85c3910c989677ba113d2a5e274253d939be4dc193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-lavender-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bb821481b582ce7e85ec94e08a8ca0bf3b8d703c1815873b6a1d70f8042ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-magenta-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8a005f29aa7a2413c4e4e147c1cd5f83d1dc6f2c0e99a82ac8171e49c5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential-chocolate-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bb1c35b4c6e9b44adf7a131197be7eeaff564e25b876def5e375f6d6b0ca2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theorhy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15d11789092dac8ac08e646da260e8fef749f90da1e550d356cc8709d0d6766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-sapphire-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e2a6138e7dc543d3d60e75715fba2864f2b4997e17120a6a4ea39bfedba57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flaky-turquoise-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300412a4a365cf086854f146429eff5a882b5adad392a53b18ccdf88834618ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist-violet-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ab7550b3ebcec6ef24c4b6b0da2fd00559160dc78ef59522a6fc184cd9565d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66927 Malicious code in banbabbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a5cd44b9c067257adfc58d1225a002a78fa99e080064b9f67397bd06ac593e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70087 Malicious code in provincial-peach-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f52f720a5e879d379a77a5e45df3236ded53d0d70d0c23b0fa1ecc3943931d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68119 Malicious code in evident-red-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68107c03ac01e909649fa556dff7a904142956bee71ee54979da9772867430b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68782 Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71023 Malicious code in sympathetic-aquamarine-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39b35a915552e0e8e688f43df011a4b9b70e8c263d32412be3c7c17d35b72c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71116 Malicious code in thirsty-silver-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e740a46d0c73c4ae024708311fa4f0e97d107b8bf6fbae9d047735e58bb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70183 Malicious code in rapid-peach-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05993d1c539cee9e85900d0d276da3519aadf7b3c6b6be19bfd888a0b4062f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...