MAL-2025-68229 Malicious code in familiar-magenta-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e7f1a7dc00856ef8531a99554365c82b9c554354fb0ff393203de8b871c5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest-peach-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4394323375238f4ed22654659efc38396d1f9a6d637783288429de549a30775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-lavender-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a49d7824829ccbcec70709427acac77d9eff0800942d1fde35d0872bc00fdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic-cyan-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b2250d1a058a8941290f3c25f2ae9082763188d34dc023e793d26cbf672c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109b1c1be1d3219174c1c4c5f7b50363aa9be54c7f57bee92854eb55adc1637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested-yellow-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe4c85028d67bc884a414511c71d576588853c81295bc7508acec70d97400e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57fe39cd16157d858394cbdcc95cd84c1b86b199dcdce7a2fa75c38c28906e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-salmon-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318cb5aafdae4290b93e47e904fe9d6f26e74c08382a17fa6dcb3bb8ba182266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic-blush-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786c93d5372ceac16850c5b343f2565fcc58abbf34a5a254019a99f57ffa744d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal-scarlet-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8cc7f8385c62b7dc9ed6b2bb669f8c468c15fae4643d4694d16aeef484cba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-cyan-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fa5e634c5aacf6f1134c46a683e2ccccf52590fd46fb051c4217cd832e790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-yellow-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc87d1eb47540de41f0cc177dda8238a93a7f3eec74a8264a9b883f77642e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-aqua-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9f429ad202cb26cff8fcbe0d3b67afb144f5d4ce9eccace37eb049b92272da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7806b961690c9e6b6b22ae42eac72a5786468af855437e658e90f58e433d7d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little-emerald-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f797c299ca1bb690f88424d130cc2fb755517e8be7799f4bcfe9b2cf52c7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-rose-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b727651060212a60cb1256b61b518f24b0dc2b142602872a55457521669cb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint-yellow-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7692dbbcdd17d56fb3a61b7f1c7f9101f88b25b401a2366ac03ab1d68c768bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a00a22a5963761ed0d5429b8fbb00dd6a8b38115524fdf1280d5a0d062bfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...