MAL-2025-66568 Malicious code in @bipyruss/yrinth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e89412f99bfe0d1d736f714067a05bcb984f10eeb64c0c31ee4d0c40810170b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71369 Malicious code in used-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13832c023176c909e82d8a1b702913d04e85d74ff41eb984c70147e081c5bfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moonmooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a07e15a119c31a9846d824ffe4ad9d996e2b78aaad96a1fee8e0afc4fb557f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising-apricot-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cbb2ebcd3b3aaa9130774eff4e4a99fa18ce8e204f5d9fdcd6e95949a2c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70553 Malicious code in shaggy-amethyst-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9f5e6a0b359ea99372ab32a99dbf278597cd3fee23952f57eb6caea52fcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68783 Malicious code in illegal-silver-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b544b2b20b0860cd4a305b941f4b8631675f5e947f73b8a191d41cec5127b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66830 Malicious code in architectural-coffee-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9548be6b7e78cf127c261f8cec416efdf671117f2c52fa1261fc4e63731ff5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71037 Malicious code in tall-white-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ea3e702461cf0b28d41732b2b24b56af2aee8e07ed815f75706eebd4708387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable-lavender-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cc4586f9920b93bdd3083b7d5174b0dcf8923b9bfca00c26bb8466c2fd4336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial-blush-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74268585cafe04b13ac1648b205bd954184697ca6b99ce1c0cb8268cca0e33af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-lavender-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89b456cd94e5833aeccd8fba474787143f53192382517e1040f22997c0967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masvusgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ac5f9f49a4997945eb81f3544c2b728b1f334baa3bc41dc20bcd74bf800a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70467 Malicious code in satisfied-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24e6355364ffbf14c639da3d3ab95928e6a0167704f22fd63935c74076a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71239 Malicious code in unchanged-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac9f6914f933b76e152088b94448fe2f33b87f806ab67acc80a6ab790ebb859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69601 Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential-chocolate-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bb1c35b4c6e9b44adf7a131197be7eeaff564e25b876def5e375f6d6b0ca2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-magenta-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8a005f29aa7a2413c4e4e147c1cd5f83d1dc6f2c0e99a82ac8171e49c5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional-indigo-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0619a155091588b311595c85c3910c989677ba113d2a5e274253d939be4dc193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...