MAL-2025-69498 Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68376 Malicious code in flying-purple-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67dbfd4632c6585f40553d87f1ebc341531505b5ca0f3bfc6edc07c3d99e8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divine-turquoise-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd5fe7a0b3b08c5da63f48da32ac67afa7695ba0b7ccc7f0c12d8012bbd138c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69829 Malicious code in particular-red-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5575dd5e1c15fbe19dc7886e281352b4acba6ba3309e0e3c5aac4c02d286e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed-white-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2aabfe99b0e862b636f464d4b9df7048bad21e93e221e12681159d34eee4ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-emerald-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy-salmon-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ea89e186c278eb2423d71cd64863133184cd2332efbbe51300e3289089ab48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67395 Malicious code in condemned-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43b075f682aa8cadcfe15854f6c79448acb195e1b67c6d96418cea018d9a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68896 Malicious code in initial-red-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e3c92896e161e5a58d2608703518b87af1d886e2a43d57ca1236b9ad114244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70022 Malicious code in probable-amber-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaddb09247abb655c96fd5126cb237aaac1cd21443bf87f766cd58c6706aa242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67662 Malicious code in defeated-brown-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdb4bd13f546b1d20d5210cb4d24f34348f24f433288c54f6dd47733fc681fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-maroon-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ce8006ae10635ff970f030ab093c0e447bc015f9526ff64326f8fc82534d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial-gray-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3af0b5f3b615de2a59bd8156ba8945682f6d3a2468b3baf8bd61914c04dba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-tan-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429fa8c6e39ec08179011487be3eaf3ca4d384d4d8961488ccce7b2a99e87c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-harlequin-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94012b3128b1e1ed8db0ad1eef5de8fa4d5f5fb88baadc01f51bd52a00f8a957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser-green-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d75c7d6c08a0690819974cbcd1ba614da9ffbfae7691268b5bd7e4828594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-coral-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c89e19e997af573efc8424b164ca65ac01c06b0cd0613350d640c0022a31d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68615 Malicious code in grubby-silver-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c879a7a202c0a87e81bd1d98d4a0a2d4be98151004e4efaecee924caf5a94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70939 Malicious code in sudden-violet-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d732500f28025ebe20921c0f11b93514de44a88b227ac9c9e1efbbe891e6dcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67027 Malicious code in bold-purple-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba15fdd23fb80b803a84a52631aca87ee90328550cd65a2c080bb4c4179c2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...