MAL-2025-69280 Malicious code in mammoth-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173d922fc27344c632c1a729f1edca13ce22d434693c1a30beffa8b87dc92eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66645 Malicious code in adequate-apricot-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9af5f501e85007259915f179c4faa7daf0d29f62f162369b706ce2f8aa53b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69066 Malicious code in late-lavender-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal-teal-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf377d78327a03fed8ac4a8b863ce320652b8659c96b4e43961785478c15e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-fuchsia-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cfb1a2c0ba9dd90e0f80f4e706aa77d4c328ed49db749bb6d8df4f63b81946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-yellow-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae1111d2684c2a91d1a402983493e994218b28e6b1e0de16750edb31b42496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilosyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bda558a57086f251e9ad10bd499cadaa451759ac006c47f433f9e9820fda42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered-brown-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6a3a5f590915da2e47d168becf2d4e42606df0354ad4c559e01fcb3f575a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad-apricot-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a83631e94411546becd53e752f452403d936cc3442d116709aabcb98f58dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-teal-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bcd445a3a507659b19a1e581d1e5b77ec6f7cd784f03e2d50dd0aefd4f109f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-peach-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db12b3d27d546a3c861f8df02ec38d7d4572c14c66078f890cfd0cf3b3c7375c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-peach-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c484389dc4509b994eddfab5d5653d408d05e3de4d9c978875163980b6a4428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-scarlet-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc1b88675d12ad22f57a0e5e237a1ff6a99b88816417cd6545c8ed1a9153ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely-gold-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385f65114f12a317ddc73f9772aaf353ad97156059bef28f5130eaaa0f3b4780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f40430912fe11a055517b10085d1bb2c1f62fe9c2fd64635fd66a51628569f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creamycandys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c38eff63f4eb50501cee35fbef8241a227f91bc47f10d42695c77529ae4ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering-moccasin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc84b8289f00d4532ad4f9f4b0ed863483ca90b4839cb799c6f9d0e16db341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-coral-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b14f8dcc9e07124175c8bb276fe72453bd7e91e5ebdba0bf025642cc5e9ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful-tan-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50120a95afbd3d8b9c4b2fa1ffbbd580c00dee50bc4f27510986adfeffd6c08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic-amber-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22e2e1db8bd222c9a6e0147fc20af4d7973d1f81b233b5ab0c7d33b3452292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...