MAL-2025-69408 Malicious code in ministerial-orange-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3a8efb19c5c76f8a5aa0fd91d7d80e7c45b4d3e7ac93106b607801efc4154f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70231 Malicious code in reasonable-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d90cb2a35042d6b9b56ea2bd88e112a31cb6d6f85e6108dc7258b207ac0314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70050 Malicious code in progressive-emerald-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb88ae567f1f5b1d4d743205b503cff50b329402341a61b62c76ede00b85d370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic-cyan-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b2250d1a058a8941290f3c25f2ae9082763188d34dc023e793d26cbf672c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109b1c1be1d3219174c1c4c5f7b50363aa9be54c7f57bee92854eb55adc1637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested-yellow-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe4c85028d67bc884a414511c71d576588853c81295bc7508acec70d97400e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-rose-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b727651060212a60cb1256b61b518f24b0dc2b142602872a55457521669cb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due-orange-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8faa3d8c4f487342b99ebdf415b951db570cf4f0cda9414e76ff054a23cdf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-blush-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f1e6c77bdd9c139f83ac5d52e3941c698b140522269dd82bcc2fd446f8a7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-aqua-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9f429ad202cb26cff8fcbe0d3b67afb144f5d4ce9eccace37eb049b92272da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little-emerald-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f797c299ca1bb690f88424d130cc2fb755517e8be7799f4bcfe9b2cf52c7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc30e1022519c899a67877ec078a99646e1cb24196c99f9a17773a9e7f3240e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57fe39cd16157d858394cbdcc95cd84c1b86b199dcdce7a2fa75c38c28906e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal-scarlet-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8cc7f8385c62b7dc9ed6b2bb669f8c468c15fae4643d4694d16aeef484cba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic-blush-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786c93d5372ceac16850c5b343f2565fcc58abbf34a5a254019a99f57ffa744d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-yellow-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc87d1eb47540de41f0cc177dda8238a93a7f3eec74a8264a9b883f77642e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7806b961690c9e6b6b22ae42eac72a5786468af855437e658e90f58e433d7d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...