MAL-2025-67291 Malicious code in colossal-green-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987f041ff8a13fbc7a71c9fa79ea531ba748b9de99e30b1bfa9176384d8f3d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive-scarlet-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4803120d621ccaaeb1c27d657cfa0839a69e6d98f113b92821a0022c8cc9948e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marine-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a138110f729f9bb7630bfd7cc294d29fdf6379de68f3fe99b9e7990d62ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-gold-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8e0b3411496a20e0e97cda6f62fc961a605e143f27b93a489eed38e5fb63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-indigo-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428451e10a9335f52c1ae577a1d6edad3f67a01f6a6ce58a49d07d3e0071ad22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-coffee-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb90ee11df746a438c176d5b5efd0a07a2fb2c575729cd3d52afa6fe844a6e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-tomato-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb12089303b6314dbdfe10ada149e0a17d27ec84259aa9ebc7ad9cd54af1c86c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy-magenta-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba193a368057a545eb832f707d6ac91355d50f84b8ef33bfb83c27f5881bab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average-orange-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0954fba9bd267a513ecb8080374cab3f013d749aae05677c8ed0344fc95ef627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful-teal-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f5e59f27e3e6268d2e1001bdf3017c3c196cf5eaf367f278ea6dbd5a1223a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random-ivory-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e37ae6830c8f18657af35e703746010db0db1e2bc081efb08e7b5295b672daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-olive-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e975eb1ebeb31a56ce0cb074c6bb45aef498c7fd8942916e743ff604551a5e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68684 Malicious code in historic-purple-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd4f6743c8f2eeb19d293a0518149d120c3145785ed8b89d8463d6f4766c508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71143 Malicious code in tiny-aquamarine-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732b539d1cd901984b987e445287b3503aed960b724d962713e3fc06ac7d8a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66975 Malicious code in bitter-amaranth-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685da90c788d49cc51fa687222e101b05dc039c5915454556f1deba7f221632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69144 Malicious code in light-coffee-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a8e6c936fcaeb396e096a81d0ccfb8256f5b5328e3dc71baba7b8a729e646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-amethyst-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8545eadf967ea98f29abe5ad0704440faf67e31a3918609208e3124a1894d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-amethyst-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e1d1c33b23e264a94e5e57b411e64e7f36daf1ff1b59f0f11d3f07653116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1535b1b6a124b5fbf6bdc30c9f814a430528e3b72f995ed75b88cb9bdcb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-violet-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd2e0cec3761605ecb08a23b6adc458b99a58468dd245abf1aa9f7720dfa597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...