MAL-2025-67541 Malicious code in criminal-green-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510938070d9a14f3458d5c6caa6e4acac517749dd78d028281014e3977ade2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69576 Malicious code in nearby-amber-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24920925b62870689934f00932754a929f1c04386f728ac392843318bd6eb8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71559 Malicious code in wet-coral-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b764fde6b25240a1326ee900300f1e5fc5debe982d31f9e967d37c8ce10da3c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-tomato-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb62ba2f970aadf165bac30d424411eafeebaeabd8d275e831102326af24c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little-emerald-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f797c299ca1bb690f88424d130cc2fb755517e8be7799f4bcfe9b2cf52c7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-salmon-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318cb5aafdae4290b93e47e904fe9d6f26e74c08382a17fa6dcb3bb8ba182266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7806b961690c9e6b6b22ae42eac72a5786468af855437e658e90f58e433d7d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal-scarlet-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8cc7f8385c62b7dc9ed6b2bb669f8c468c15fae4643d4694d16aeef484cba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109b1c1be1d3219174c1c4c5f7b50363aa9be54c7f57bee92854eb55adc1637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-yellow-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc87d1eb47540de41f0cc177dda8238a93a7f3eec74a8264a9b883f77642e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic-blush-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786c93d5372ceac16850c5b343f2565fcc58abbf34a5a254019a99f57ffa744d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint-yellow-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7692dbbcdd17d56fb3a61b7f1c7f9101f88b25b401a2366ac03ab1d68c768bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic-cyan-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b2250d1a058a8941290f3c25f2ae9082763188d34dc023e793d26cbf672c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a00a22a5963761ed0d5429b8fbb00dd6a8b38115524fdf1280d5a0d062bfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc30e1022519c899a67877ec078a99646e1cb24196c99f9a17773a9e7f3240e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57fe39cd16157d858394cbdcc95cd84c1b86b199dcdce7a2fa75c38c28906e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-cyan-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fa5e634c5aacf6f1134c46a683e2ccccf52590fd46fb051c4217cd832e790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...