MAL-2025-70717 Malicious code in sophisticated-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6db623950849062504176fd2565c8a084550ca53e773189c1bd444fa7fe088d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66989 Malicious code in blind-amaranth-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698e76686e61628f27e10e2a84158cdf025190b7bd0fe4fcbdfc37c2cd441dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-aqua-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1080c08842338178824d12a0dd1267a9d38ac725da62ac95a1df8145161273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-moccasin-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98773a78cd4b85e74c3503f37d4182440027f01241391b3c10f8551cf924dce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-aquamarine-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1dce1795ef6822632c8b1a6f52480502a6ae21f336db4a5ff6b1c52cde3eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-blush-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b1d420b919eccc418aed707642aa04cdc98bb021e8b10fbd76a621e9b1e562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-olive-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0c20363a8e00a5b5c63fe12fddab697b5d66e47a553d8a6c7441a9890a84cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-amber-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42699aa96c8bd124674e7f5e301b89b22da8a17b151b4f3be42f89b526a2ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6151914596df3e7fbc5bbb5b6e9bb4d0dd14880e46382f26ea90ab5e15d023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired-beige-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7067f6c3735517fe5151aa62904e8015babd72ad28c006a3b701fafb7fe4222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vague-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d14f19397bc5e958d1c64aaea55c34f0db72dc5d1e64749cf6a73219e64543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody-lime-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d561f0793fdb5f0e6ed4c6ebbeafa6bc323865a320f16450dcc5c2051b7cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming-white-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc167ae0d1214189af8c725bf2eea5d66ac021cb82113e44b20c6be29291e179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible-tomato-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7268b093a2d3489cfb805c8c68cc938c72b8ad52860b06c8dbac0868e9624fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near-teal-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d203074b6302dbc212f261922b14f177385f22ae6da0c24dd165b33224315f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed-rose-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8d148a28901cb484e08db5e81d1fc1591a192462a004b64bc6ecff7ebc63a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-bronze-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f281a81755f1e596d13663de9ae91e45537855443d02ee67cc91f37a26b1b964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive-apricot-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2a0913145f1a2e86c5162f180bec4e8f15645b1d251446b6e3c418bb8d4108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant-copper-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeee2f32ecc23926a1a2176385ede38896e478e2ce4c5f12ae84ad2c97db437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...