MAL-2025-73545 Malicious code in irma-rujaksoto92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddfa24618031231dedbe493db9c504393eef43fccd1e6b45bc9d3604ad7bb197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-copper-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1f98dcf328a617c8cc9f55dce067227ae10817184a04bbd903d4cfb7a8d896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal-crimson-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d0c014b996150dc2f6e8c6ce228264433db8c5c00d3343e81418db0211ab16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulatory-fuchsia-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2042aa54307128c903d87d2f038cab374b5df3bf6fda5c1e69c22106c4faa8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c259c0f89aff7f17c0063923afb25394201fbcbdd2865660ec945c6b8694a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-green-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c0a66e8bf4723c17b02503e8649d2f410b96125c93fd6997d2d569d7a7f87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-amber-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dfdb46c6eb9f08bdcadb9b223da6c1e2d4b5959f73c8b1c72f88b80f9756ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany-gold-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706dc06b6205bdd094f821db91785f50592db44483eb2e5e9f4ae71b8dedd085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-jade-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb414a397d4e983d8b94a560ba15581a53e3a678babcf905dec91b369813c117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform-amaranth-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d463bcd8da9c729e9f93e7b0165942b9e1ee908a147e2457ac6436ecc799ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-moccasin-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5e12307fff9bc985590e90c0910484ad9d555b8ebdb12dfd22b8bdeded8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in far-jade-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d2eb9dcc65c206e3f5055d1d6d2a04064156c054085c3b775582d2ce31acef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70473 Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67390 Malicious code in concerned-silver-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b82a96891e7a918e290b4e6b546742a6040b4f3e5816a01230358ce753bc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69892 Malicious code in pinkwolv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa34ec5b6f6b0ea500b6738f925de323e34297f13690e7d8b2614636f19f8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71751 Malicious code in ytterbic-teal-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc4be4fb7a9d0a0c2d93426ca7c0eb78c3ad9e4df4f360defeb6ae1059307eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71156 Malicious code in tory-lime-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39dafa56f50110a57bde94c2e58bf86483cdf06af5bb390eb09732172e381b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70323 Malicious code in renewed-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14710c3ebaf6a17c6ff7881fe33b4c167e029a49b2bd73db8112103863c5721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67614 Malicious code in damaged-brown-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7e9ad811ee7126d7567fbe41b823891984378f252e95a6e598b30e8a8f4249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67393 Malicious code in concrete-lavender-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e94e24198b0873c9a263633a821d6f2003f2eebcf73ba5e8ad65dc1c7c8f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...