MAL-2025-68830 Malicious code in inappropriate-indigo-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cee0ce184009a61a7a1b5a401a3238d0527b7855b66865a92e88a0e3aa84ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad-amethyst-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e263cdb263adfee24f06fe9872ea96c8179d80f1a28b8626d73a5d2d878f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8068ad0d0b4386fa692f5f9d434b604e2fd05adbe271f07e7510a62db732b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4266c53a070f62e5f17159b2eb674432fd85587c83a286f4c5420bbc2c6169a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-rose-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2ea3d085281f31ecf0833638695e3eadbcc6451be3c0b94266db2d218b4df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful-brown-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28e9dcf4debea59313d009aa1783c545662e104027d32a9bda5db68d96df695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate-yellow-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5692b9d0da96cccac6e5e8914ca293d8a24d32db6f074305ce7f0b9de30bb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite-plum-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ded4e9a1bb41f022313969b94ea9325695b10d540273c0e3fb770142b1e8fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8821c2cac5fe1aa35260bc2bd9e51b7e139130b9049e16b6ebfe568a86c3f5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-tan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a071bb7266849f446e2d28cdf0789c8fd12ade0127d6c951d7e3aabf5d3a661f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slippery-copper-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcb356e10e64db0af6507be6580a4eed79afc40bb88a73075db9379135f88ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29824b3764e4a56879f3c94796fa7451a374fadf2d736e18c11e7015df1038a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist-green-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc7e04a1d8c102740aa9a5a2ca5677bb71f662c0da3def1fec5716d1f0c0a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opiumoee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449e84d7c04ae3ea4ad4a0a53d4a0753731402b5535db365475096a2a2765e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legislative-rose-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa5fc42ca32646aae0fe5d8d5e2acf5f20468de715879a7073f81487340b598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67515 Malicious code in costly-chocolate-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b41e345292f9259e82c48dd7261d1320fe8528d59d2ee5d977d16e31cc3d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66818 Malicious code in appropriate-amaranth-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7029ab1e9a8977c5c3ba17f0d4039f3dfe179686d9c423acb2cca25ec9b8766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68627 Malicious code in handicapped-blue-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12ac73306fa2d1e9649e76448b3a58fc5920c68e06ea10108ed3b65c39b5db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69204 Malicious code in lonely-blush-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8092f3ff3eb9616f63d445e881a317d28ffd865b0c72f0157cdfe3572c42511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...