MAL-2025-67498 Malicious code in corporate-sapphire-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ec4b4db9224762149fceb07bc18ce16445721c65af4bd38c48bff1602e98b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68300 Malicious code in fellow-magenta-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e149eaf9d9c06a8f245a121ad697f97689115f8f274c0890b90864b17b695c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70913 Malicious code in subsequent-pink-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f1fea189b798ad44d1d953e04c2fd4250b3d4b38b1d28eef2b2b414c0c440a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71346 Malicious code in unwilling-gold-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d8ad0ccf571605b94273519e366ee34c781ca576a4d10c220e3fb6cfc794c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal-cyan-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1219ebce5c6e3e4ce4b6f83e4d055e91fe956f20a6d23116054154b23665700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim-silver-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e650abcc427e730c5e75d21895cb036015f9a38717de2fe6cff9719e84e136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-coral-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960fe0a29d9477638d2a90cc3146a0571d7097943865036f4d909f6b13dbe54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-peach-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d0a8af13ccd69cde59f0542873dfe096ead6dba505702de2df31a01fbdf406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest-azure-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d1f11fc255e5b11cd6a8e8101d607e076d97ce9b67c1ee15c524bb867bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66564 Malicious code in @bipyruss/quantumquill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b81aab42c61783f20b7a7648dd63ce9a4081718c7e187a5ad28119d79375fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69006 Malicious code in jeje6131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c1916fcad7e93e9ee15ab80dd02c0fc23432dd52e984eb51cee4b91b151ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69513 Malicious code in mutual-blush-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6be8e8a611a4c10be1b762ee7b83a9b1948a4bcc3f1ead38c2a3e57a869e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70383 Malicious code in ridiculous-teal-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba89dd83ca3cc5022622ba54633c62e7f122538a4150168b07539020ca3f375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68245 Malicious code in fantastic-coffee-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41743e8375d7391d4ad776cf5dc872cf1cca001233a0b52790a079db971f452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70258 Malicious code in registered-brown-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6a3a5f590915da2e47d168becf2d4e42606df0354ad4c559e01fcb3f575a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69693 Malicious code in occupational-violet-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e396e17e3922ba02210663c27255408b99f97ca7c6c3992bbfd69b3b32ab2c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-mie41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40593967d8fc5928138b0f652d1571175b981dff510a7d73c087429bd721391e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lontong69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9795cb85c6851b8736e7d96bc12182feb3d2383bdeb66ee86f78a81728fb5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-sate21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8352b66827afc14902e2ac13eb1cfdcdf10fa30544993b18b957526ea72096c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...