MAL-2025-66976 Malicious code in bitter-apricot-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38874b1117a1b7bac191dd5f956e349f10f29dad68873cce1ad6ecfb9b476200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71436 Malicious code in very-gold-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fd09fc637b8c273531f83e803dcc9d2c3c36319cebca2920f30d5dd6043310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67728 Malicious code in depressed-rose-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8d148a28901cb484e08db5e81d1fc1591a192462a004b64bc6ecff7ebc63a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68537 Malicious code in gleaming-coffee-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b43f4c2b5848d86efa5744cf43311440ef501bf026698105f5a270c5f948a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c86d9dbeb4f70c0668bf3a688d2a42bbb5e4f0f9169fd9861a243c77c4b12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average-olive-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8268bac24a4fb2c98a711fb04f7ff9f23c507b04df464ba9480e5c0f0178e708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent-gray-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36306cd52e91030f33b057688d85c17690c6059605b360d7f49ad1d87f049d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-peach-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9e2f18d00ae24c8afc4cf759851c2db5a2d1c1a8dd3414fc4bae88a73e6fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68334 Malicious code in fine-tomato-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe96c8d132af9d99d52963752b9121f72311ed0a275fbfb8b571cc34c1adee34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-indigo-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a51174c10a1e63712a3c74ed6a1cd079532a84b120c95455c96ed4bd461b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d636daf04a8d75058a259dcd4f7dec0052e9fcb4bb953a1ae67d35b49c3dec8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square-coral-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02e84e88ab5326f140d99310d7e5784957b78cceda076b61251429d444befa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden-purple-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e5c20585cfa09363ba509137da16ed7ac133a76508c90d9e0ff055c093d52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist-tomato-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29a56b90de9201432562ccf576df4d0e8613cc9eac00f9b8b0b1155282dd591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-orange-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe1ec031559021ee997f82088e3df76753ec19574fe779efc06f0c21159a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-amethyst-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96e482b4d6b7a93595afbad1fbd56cb97264b8bb09a9158139f2b343fbf1efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange-blush-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b1147e1dbe42e9219f9faa55cea8fb805b76fa0374f263a0fc42610ca5c249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-aquamarine-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be00cfffd410ba5bfab5729715196c9bd0546a6ad1a950d88704203fdcfe9475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...