MAL-2025-70673 Malicious code in slippery-jade-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48662f6e9427fcaf475a0f665e6bd98541fbe657f3b66c4519bbcdd223bb602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annoyed-lavender-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5e07fdf7e66fde27929642af7bc6352edd59fc37fea4491f2b15a221b5230c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying-amethyst-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14048e1f37e4654640b531593f1caeaa8ef13f9270568262a1db69ca9935a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-harlequin-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36f45ae10da48331ac0f9b4c05293d2cac5959c595c4fe7e469402741c8029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in limited-amber-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a385bfd434b0996ea8c64b1acd3b8eab3e8e17ef9a0dae3e6ca0d163490c7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pure-salmon-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69f23996d37bbbda17b7865bbe9e4910c1c1c57c957d4ee9de54f1f1bff4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy-scarlet-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6734badf17ee183fde1a820fedb1eb2f74698ed919a64e427e1f360ceada42da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-peach-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2207b76ef8202f76519a64a2b9607143566156afb8c447abf9ef797981025db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady-brown-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776a3cfeb48fbf18eb1159f9d79d1f9a688ded670927161158d18d7694b6ce2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless-indigo-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b1017b8efb49df9a8fd6489cb4a37cc8b15873a3b936cd93bc4efbdea7b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilaoseyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad052b51719212e37e0524ff8db5ad86867efb86c4ba9c575cea5b358f86ed46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-amaranth-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a779ab82f1633dd34123a92395483b457a16d7096bf99615b1da53fe3a03a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate-apricot-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46d9bf47db867a3401a99a9ded5699f969f1cbf91c68163edbadf572903b668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct-moccasin-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6c96a1f68885ad20ece30f2e8f676cd5012a6aa9dab83cfc5d1496672a6602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective-coral-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427ccb9ec1d4148f51c78750fb754e64bea2faed1844aab10318ac5395c16a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-red-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cedec46ce37ac2717592c0826c48e2ecdbef71ad22fadb60b6008ced07774fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back-tomato-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc9eb96f6ea491f125e2a8ffc9ab979f049abeece0051f7269e05d6a12ecf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70480 Malicious code in scientific-amber-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c977ab90c9c3ec7ac8264ad242b76ce5e9a0f4b79ed58ca90402c56a428b2984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66706 Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...