MAL-2025-70386 Malicious code in right-azure-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be072e2cbe29f81058ff0769be1d5e4efdd9e1bbc5f040e5c8528b9fac375bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69467 Malicious code in molecular-brown-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b448461a3079ca298f1e054407940cdeb9842834f1c2b5feb3cddb65219967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67841 Malicious code in dominant-rose-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856d464e7e6dc5f351612eea466e6dd6a0a33014a05b895b94b5f5c54bbcafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68001 Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71045 Malicious code in tasteless-coffee-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c528b17efefce5e949e95d4f64236255a17876de0144cc4f7f337e81d4141f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68346 Malicious code in fit-purple-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40acacd93b31e88dc7c65e3662fa1fa278185d6be3aab310bb7cb72b570bf69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dragyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f571eb05224447a1e23688acbd310f0f9ffeb41114c8ac14191e2c926ec13555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-olive-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2936099ca0f61c01b1d2fd8bd16edc72c5a4aa64bb3f78065ffcff5c00239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred-turquoise-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f99e8481fcbec84d2db566bf22d6a03861a58572abb656fd8328cd1906265b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-azure-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5770ca3e2f6346ea16e82c0218a69932c3fe4d26a7e8597e9f29af33d373e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-black-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3552019798c7a3e5ea1f44e788da4b1cea096bee5c584e27a3e05732c48e0e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-apricot-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412629b0158b1602c1c84a6007d27f9e4502a403f63a9894093675d65a6357f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-aqua-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1803b2a8cadd50c82d1001e1d6229091453a5a29061f1f709509840e982c488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-black-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd1f9c70907a2bae1c05ea4270a4048e5490023234e23911f4705d98583a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable-pink-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9f3eff7cfdf25fce455185d5b3ce95318dd41e8d299f0108847a1d97abf1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dbe179b2e68e2538332172aa823d6f5881c05992b72625f43b5269ed12cf42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual-maroon-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feb7139dd37eb4220985699b248cf39d78c41250037d13e33376ae4464145f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim-peach-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f41b2319588b2217f39c01396663705c121187a410907691b549bca6c444096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-turquoise-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd228d559a82b995a9e6128e1dfcdf41aa5392539db14b9dfa45f998129baf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible-orange-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae880034a2cb679bef3088915d85f8f10680a68c812e4b367dd6e7346fe30ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...