MAL-2025-69343 Malicious code in mechanical-amber-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554de5c99469419ad6d655a803d9a3e57afc2b5be95bd4820dd2247592317d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68664 Malicious code in helpless-plum-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1001041a5344d10719f28fb3150584b7bd6be31b08850bde799cd0965387e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar-fuchsia-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d7aba963456cc4b9f5d88efb5642ecd04b3b355e17a6bcd60daf55876ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-jade-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160156899d54efae165224b9de6a63ad9d79c83010fc660a3dbf1c0b4a779de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low-brown-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8af030f7d627b1654918f903fd17f71c90e134d05cb7867eb36f7c2a41007b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-lavender-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89b456cd94e5833aeccd8fba474787143f53192382517e1040f22997c0967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-rose-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971081b39afd29c32d7a6716ac2150e2a7ec1e30e37f8231b780a3b8c10aa2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masvusgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ac5f9f49a4997945eb81f3544c2b728b1f334baa3bc41dc20bcd74bf800a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moonmooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a07e15a119c31a9846d824ffe4ad9d996e2b78aaad96a1fee8e0afc4fb557f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living-emerald-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4057aa20b1b48a8d274029c34822eab70d491c684c98e7ecf21c4dffb3fa5561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising-apricot-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cbb2ebcd3b3aaa9130774eff4e4a99fa18ce8e204f5d9fdcd6e95949a2c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68783 Malicious code in illegal-silver-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b544b2b20b0860cd4a305b941f4b8631675f5e947f73b8a191d41cec5127b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65480e409db966d159ab97c3ed2bddde8af21509ac9938ef5431690db97bf69a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...