MAL-2025-70231 Malicious code in reasonable-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d90cb2a35042d6b9b56ea2bd88e112a31cb6d6f85e6108dc7258b207ac0314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69408 Malicious code in ministerial-orange-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3a8efb19c5c76f8a5aa0fd91d7d80e7c45b4d3e7ac93106b607801efc4154f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68229 Malicious code in familiar-magenta-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e7f1a7dc00856ef8531a99554365c82b9c554354fb0ff393203de8b871c5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested-yellow-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe4c85028d67bc884a414511c71d576588853c81295bc7508acec70d97400e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-rose-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b727651060212a60cb1256b61b518f24b0dc2b142602872a55457521669cb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due-orange-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8faa3d8c4f487342b99ebdf415b951db570cf4f0cda9414e76ff054a23cdf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-blush-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f1e6c77bdd9c139f83ac5d52e3941c698b140522269dd82bcc2fd446f8a7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-aqua-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9f429ad202cb26cff8fcbe0d3b67afb144f5d4ce9eccace37eb049b92272da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little-emerald-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f797c299ca1bb690f88424d130cc2fb755517e8be7799f4bcfe9b2cf52c7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57fe39cd16157d858394cbdcc95cd84c1b86b199dcdce7a2fa75c38c28906e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal-scarlet-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8cc7f8385c62b7dc9ed6b2bb669f8c468c15fae4643d4694d16aeef484cba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic-blush-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786c93d5372ceac16850c5b343f2565fcc58abbf34a5a254019a99f57ffa744d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-yellow-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc87d1eb47540de41f0cc177dda8238a93a7f3eec74a8264a9b883f77642e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7806b961690c9e6b6b22ae42eac72a5786468af855437e658e90f58e433d7d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67663 Malicious code in defeated-ivory-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc535268cdcebd2aaf9c796aa0fed3710a6068fceba41d0965bd66cc52998250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-cyan-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fa5e634c5aacf6f1134c46a683e2ccccf52590fd46fb051c4217cd832e790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc30e1022519c899a67877ec078a99646e1cb24196c99f9a17773a9e7f3240e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109b1c1be1d3219174c1c4c5f7b50363aa9be54c7f57bee92854eb55adc1637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...