MAL-2025-68301 Malicious code in fellow-white-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e386cf8e3c8d8d23fec4917cf88cd4d7ddc20fa30cac669a0b0c4c1409adcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68483 Malicious code in future-teal-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b326b647334f84af5e3ed88b612469105b442e51e45ca8a5d8f93047851a7506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-orange-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b790823ddd06071bc58f646f8e96bf7c7ee2c505f0bb4ae1a2a332176eababb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-black-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd1f9c70907a2bae1c05ea4270a4048e5490023234e23911f4705d98583a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-black-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ced992abcfcc4fdc1051e69c55193333e19e613d56906644478124a80b30c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional-magenta-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e65947bda5f74efeeff38cc5a7ef8620893ffb6e7f640251bc62262e8dd29ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely-aquamarine-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2359fb86f59d6e1b186c4e64d33fca62288a6ef45f3036afcb5784b8d455a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant-indigo-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4375de285b593003e0e41f7edf90a4494e70e98453c84beca63e2fa03f6b6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten-sapphire-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4702f21c8e85d3e3338244e295e5990ab7e4abd2133f03ae4e33608fa14a8d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall-plum-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc1cb4bf2ea8e886ea86428823e6cb4a159444a7d366594131ea3ed5aabb714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive-orange-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d01f9781e1840dadfecec22f5240e358b4ffd4bd9c1a69c70a77c9680d2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant-silver-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a7a279613344f936623f693ddfe265f85e541046659cd10b69e237111159f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-amethyst-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3b9a92f1e02ba419ae9ac52036bd8a6cfc5c739f96f22edf0f5eb1564b820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-ivory-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33251fd68ab452088d700395191723a979f6b5760058c765725f961d1de587e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irrelevant-coffee-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c260a20a1236963509af69c32ae15248baf1b30e7984eeac4c28d3cf0ee740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-brown-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9fce6b61a6aea31ac791123bba3a5d485f5941d7aa3565219d81cb736c7180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce-red-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41377cedbb03159aebc917b253b8536590e34941344958b680d38668d1a4c327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...