MAL-2025-68405 Malicious code in fractvh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150af110a11dab7c9cab01bd6e04a41afc039b413f5721ae9d17a0adde99c50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66771 Malicious code in amused-black-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d2d535eee46bade5c911531bb50fbdf5f05474bba87634b41af4bd2c8bd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71426 Malicious code in veli5631 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc4d84a3ddffebaf5dc6e3cfbff6f981c17461ec8b6322f306033c2c9a0a471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful-silver-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aaac58b4faccee328ba24f7b40105e098c74aaf80dddbafa068d9632fae8f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70823 Malicious code in standard-magenta-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ec46b7fa77f3f6990dcd4526b605d858f99b96838acebaf60601fc21c082ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial-silver-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c513011b409f59387572033835fbaffc6ce7b24064d65b88cfc4d84707b3627c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast-gold-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723aa1f2a8dd3f2a26517cc26f4264ad864c6232a91408e27ca3f3f274dcc93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empirical-aqua-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d5b932bf56517d8470b61ad758e1ae23963b8b991da6ba1ee4283e0be9ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e509df9e9f37bc6836c7b8ca7045fd36fe7c81b9385348fae638ece4a6d839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-aquamarine-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959a2604b81e71a4f0c58569cc46250c0c5b3656e24fbb9d820a9141cd42916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-chocolate-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d7bf5dcebb64a8d8783f6a1867987ed01f14577ada5e5c129f3c8bfd3e25fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous-apricot-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9207db87e4031c77913a4b269d478ea65450fee184212b367c29bdec8884d423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive-salmon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a27c052308b9f2a1c420d8633ce9ba85ae2132b1ab5cae14b99206c521249cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68512 Malicious code in genuine-tan-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e10d9ba62b7183afbd39cbde7b28c8cdee0bf969660d323c580d416d62f0280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible-amaranth-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5b912d2f52ff2c50ca4b9726f5104b58e8fe33f98bda27f7cef6abc2aa276e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous-magenta-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db0106b2c99d3cc235a0ee8c7ea68fdd4b69f237784dda15181a85f1302a844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled-maroon-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7618ed901d86f4f2922ad7260988906b4337b4ec8f2e0da5d17face3f3c7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-aqua-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5c382e2534160271c6c8a87d10bd4fc3c73102fa4bfb10d05d9d3dd04bfebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...