MAL-2025-70386 Malicious code in right-azure-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be072e2cbe29f81058ff0769be1d5e4efdd9e1bbc5f040e5c8528b9fac375bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69007 Malicious code in jittery-beige-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb31d352bcf3a879c1e158e18a03971a2bc0b7e50bdf29ae3075d67132b6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71045 Malicious code in tasteless-coffee-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c528b17efefce5e949e95d4f64236255a17876de0144cc4f7f337e81d4141f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy-gray-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7927553b66ff1c48a380f5c3979a21b521ca7d9f1a0a31d33f8b232659320730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68346 Malicious code in fit-purple-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40acacd93b31e88dc7c65e3662fa1fa278185d6be3aab310bb7cb72b570bf69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare-sapphire-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f33c0e881d649709057736137a5f0dbf2712506d8ada57d3135fba41546e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-fuchsia-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dca9f181fd031d15806dddac0169ed1ab12517f89843f8838a101bee31d8207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-black-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd1f9c70907a2bae1c05ea4270a4048e5490023234e23911f4705d98583a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual-maroon-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feb7139dd37eb4220985699b248cf39d78c41250037d13e33376ae4464145f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-apricot-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1988c41faf998866faa5bea614364e09fac1bc1ea4196e6abfb676700cdcdd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill-apricot-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bdecf45aef9afed776db0c48e7d05e0828a601579eeb5d74f51d9088434f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy-brown-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf79680a940ed58b14556eabebe415f9d11743e4e74f149d43d8a4041c3190e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-lime-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595f426286d5903dae1cf95afeed3b0bfeaf59810df3db860743e54ad70509a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zerizt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc850463ae00925739b2b6e905cf9fc3e8c54ac26872e733a10c7058a46d222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible-beige-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bd04ea6114a69e1c7543abba31566fbd0e140dbb868af995f69b3ad417a229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-turquoise-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd228d559a82b995a9e6128e1dfcdf41aa5392539db14b9dfa45f998129baf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-aqua-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1803b2a8cadd50c82d1001e1d6229091453a5a29061f1f709509840e982c488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...