MAL-2025-71309 Malicious code in united-plum-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea82fdc7ef193e7155758160395eac8f6aa8bb71637d861681cddac5d4f8a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68346 Malicious code in fit-purple-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40acacd93b31e88dc7c65e3662fa1fa278185d6be3aab310bb7cb72b570bf69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69527 Malicious code in narrow-blue-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1271707ba1fff1cdf4b58258e4f4f122ec45b2468f44ddffd7e95a2cd4b45d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70043 Malicious code in profound-gray-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbd0fbe549adf9cfbf2db3df1f64377a2540538a34b3a2243167ae9f9d12805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70221 Malicious code in realistic-lime-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ef87d9ab3037ec5306e98aa562b06066f5d958ab41dec3b57a9b9f2cdc09ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66746 Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare-sapphire-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f33c0e881d649709057736137a5f0dbf2712506d8ada57d3135fba41546e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in richirok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9b3ec4c800158a7c721b237e626d01cc3d04ef6eaf33be85059835b93d1dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable-pink-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9f3eff7cfdf25fce455185d5b3ce95318dd41e8d299f0108847a1d97abf1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-olive-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2936099ca0f61c01b1d2fd8bd16edc72c5a4aa64bb3f78065ffcff5c00239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-turquoise-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd228d559a82b995a9e6128e1dfcdf41aa5392539db14b9dfa45f998129baf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim-peach-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f41b2319588b2217f39c01396663705c121187a410907691b549bca6c444096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic-purple-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afa6b056f5a54de4d7c0b0f54d57abafbdd115cac55c46d67b4a595ef26872e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-magenta-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f454b10aac316c8b8ee8107a4363dbb35a6765c2df3aa2115aa2cd82a4c8c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-coffee-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4662108a78b9f5f79dd22075635cd5e5a267bb14b1526ac5cd8b633c60b6e348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible-beige-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bd04ea6114a69e1c7543abba31566fbd0e140dbb868af995f69b3ad417a229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial-moccasin-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9812b92e831a12bf338ad91013070e88226243c18e3269bb7a4b20836ce2042d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy-brown-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf79680a940ed58b14556eabebe415f9d11743e4e74f149d43d8a4041c3190e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68525 Malicious code in given-amaranth-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c2d5761d03950ea05f7c85692de994e4d003d1fd15816f8f63ef94e134c26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...