MAL-2025-69343 Malicious code in mechanical-amber-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554de5c99469419ad6d655a803d9a3e57afc2b5be95bd4820dd2247592317d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angry-coffee-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f46f54cf29bef66e4c892999577a450e75fd68c79129b01bf84b5ea4e72a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily-plum-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5be62b927e61034377c98b8d0fea17fe89133d437610d0e41e4dbc53b9d2c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-olive-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e15878eae6d74a65b00733c0347140bc7cbba7a4623c92b81778df51a1d7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632f867a7ac504ac32684c53046fd6d1a8e77928d78692a7855aa99fb556696d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-jade-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dfc6d3fae1d552b24e07e390f7ab003ab17e0faa6b357447f03bbcf0ad23c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big-lime-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6478b513192b4378199d37eb9c89f7aa78ba9a0888874402b0e0805b4064c753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71239 Malicious code in unchanged-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac9f6914f933b76e152088b94448fe2f33b87f806ab67acc80a6ab790ebb859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66568 Malicious code in @bipyruss/yrinth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e89412f99bfe0d1d736f714067a05bcb984f10eeb64c0c31ee4d0c40810170b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67762 Malicious code in diplomatic-maroon-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395e3433b9c2fe3cdc69ece01952861b7a12a9f97fecb15b97aff2ff2136dcd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-lavender-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bb821481b582ce7e85ec94e08a8ca0bf3b8d703c1815873b6a1d70f8042ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moonmooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a07e15a119c31a9846d824ffe4ad9d996e2b78aaad96a1fee8e0afc4fb557f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising-apricot-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cbb2ebcd3b3aaa9130774eff4e4a99fa18ce8e204f5d9fdcd6e95949a2c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable-lavender-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cc4586f9920b93bdd3083b7d5174b0dcf8923b9bfca00c26bb8466c2fd4336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70553 Malicious code in shaggy-amethyst-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9f5e6a0b359ea99372ab32a99dbf278597cd3fee23952f57eb6caea52fcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67967 Malicious code in elated-purple-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe072a1cd0e4b0a5d5f2aa0a8aa1db6bb865dc5aebb6999466bb5a84be708d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68783 Malicious code in illegal-silver-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b544b2b20b0860cd4a305b941f4b8631675f5e947f73b8a191d41cec5127b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...