MAL-2025-71619 Malicious code in wonderful-sapphire-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c9f3b858a06ae20f77ea6a549e2eb15f882c96b1d4db684f2390c3efbaf05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70854 Malicious code in stingy-copper-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821ec40a719bf627d271c591bbc0157a49284d5e08b82da3748732e444a913c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68698 Malicious code in hon-aquamarine-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816224f5eb71454c5f0936757bec00263d0f5d1b9627b9a87d7c65ebe13f7fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-peach-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699d8093b280fd77e9ab23f5eecb84e83982b414c10e097da67269ec65ee9110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-lavender-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6504a3ea4e8dd16bdb25105c2b56fe1ed6c5d0b5aca175f580d80e4946857960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky-indigo-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf398f677bd6b5b67694d38c9552e89c5d027e6e51f99ea1da826d96863f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-amaranth-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc98befe8ac2ebe814c48390068360f6c41f6956125697df81d6d75fbf476e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-coffee-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd5d5ebd8bedda2450ed83990ada971f06b2e4a8d099491b89093ed032a7d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical-amaranth-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095e06499aefe36337976c1899bd5e6f5e0ce548c2e57acb88159fa54a1740c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-chocolate-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc2ce7ac21a2c7abe38211091aefc33be9216ce4f741a9e044c7fdb46b97ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light-fuchsia-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fc5ddbdd1e65996987752c0c4362895416231d351900af4b22a37207961cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy-plum-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4084b3478ed44e10d6d75f96fcc305cd56aafd384dd35cdfc8cb603af60006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7544ec1cadddaf841dfa15e92e54adea6aa8cb3dd8242d0bac825e2e2a4772b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial-silver-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbe18aecb0cf92360defa06b3e836c99505f92e11514c5bd9e54b6da552b6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled-brown-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d96385361db591b23f5c5cd181e3a8f89b8fb7ad062fa586c92928d6c5a83a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated-aquamarine-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5913c29cf2e31231c14d0b0c91ab4ad4b29f4780155fe5ba3e21d1b69e56f5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated-black-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4b142266ca5e0412a431e55ebc9e0254c4534dbd08a209eb74e75a24a631be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tyuiskw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610a5eba34ff8beee46ac6cbdda5d2edfee874598e039c3a2f915aa7a5e69b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-fuchsia-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f39f3857d93359409fa65e271fc63fd5e302393d10e8b6c829d5a4c3ada0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in numerous-indigo-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ea0f768f5d42785063ffde3c85d1a3afe058f1b7579af7e6df908b2a322d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...