MAL-2025-71434 Malicious code in very-copper-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ad46de82c1061354c3d4eb5c5af6eca98a158775db15f8ff4193b00523311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67515 Malicious code in costly-chocolate-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b41e345292f9259e82c48dd7261d1320fe8528d59d2ee5d977d16e31cc3d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68167 Malicious code in expected-fuchsia-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb6e0368176708c17544b8a0b9c5b8b61a3294e29e8eb6a506cead781e7ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69216 Malicious code in lost-fuchsia-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efcc411461374df0f45fac1bed1c6051febad3597a4bcee6645d911b1a2ad81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70689 Malicious code in smart-jade-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d81d73f188506c50c60d95ebc4e8f4c201a38961f852006ae6f90bf769268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29824b3764e4a56879f3c94796fa7451a374fadf2d736e18c11e7015df1038a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-ivory-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035137c5f949e0edb6de5406b68eb04eed3ade1f082867bb13f2d684676b80b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d0a67f7b15f1064e5c279642cc60c40664831ea46b8402babbee020bf09654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed-coffee-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f4742e713f37154602c5a6c01699e8c3933745bd265ab13101623db6d30c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-violet-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb0e5abc812d4e5187c82df20ca1e751f2b9d5ed63857a757051bccd157e094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8821c2cac5fe1aa35260bc2bd9e51b7e139130b9049e16b6ebfe568a86c3f5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-rose-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2ea3d085281f31ecf0833638695e3eadbcc6451be3c0b94266db2d218b4df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66818 Malicious code in appropriate-amaranth-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7029ab1e9a8977c5c3ba17f0d4039f3dfe179686d9c423acb2cca25ec9b8766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66694 Malicious code in afraid-emerald-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2342adc95404f1fdd5607c8ef5e9e7c10fe7f2b5b1521f75bc3054fa9af5bfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70522 Malicious code in selfish-jade-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b83aec333babbd4dfba9e93006e062bf2688f80417cf854296f45e09545bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71007 Malicious code in suspicious-lime-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9e4111f5b9862c31b13fb6ae60bced740193fe0b07264e7267afbf32a1c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kentang39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72de2b41a3d2d59297a3e00c1f73b8e41bfcbe57f675468dae96a8b16e724d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-oncom42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f819eef9e1f35a911c60019c992a26b56f7146b02a0477a896de3f2b1e24865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bakwan85-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702b7e59be2f75b8465443445ccbe7f41f3bb74fc4fc0b770520b15e8f5facfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f2858f05f5b93fd3cc38b8e9ebd800a211ea7c7cdcaf970f696ba996e2324d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...