MAL-2025-68504 Malicious code in generous-fuchsia-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cff985bfc558dcae248a99dbbd919ecf8abd42ba3d711acbbb11078dc244a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67246 Malicious code in clumsy-blue-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2192a3413946d209a773e6fce679107c715214ce9c78e822a2b24abc3a806d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty-moccasin-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce515512d0715a335eff1fad4116d7ddb18cae66f468d7d36b5643527ef2150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely-aquamarine-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2359fb86f59d6e1b186c4e64d33fca62288a6ef45f3036afcb5784b8d455a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten-sapphire-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4702f21c8e85d3e3338244e295e5990ab7e4abd2133f03ae4e33608fa14a8d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce-red-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41377cedbb03159aebc917b253b8536590e34941344958b680d38668d1a4c327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant-indigo-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4375de285b593003e0e41f7edf90a4494e70e98453c84beca63e2fa03f6b6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive-orange-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d01f9781e1840dadfecec22f5240e358b4ffd4bd9c1a69c70a77c9680d2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-brown-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9fce6b61a6aea31ac791123bba3a5d485f5941d7aa3565219d81cb736c7180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irrelevant-coffee-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c260a20a1236963509af69c32ae15248baf1b30e7984eeac4c28d3cf0ee740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in far-cyan-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b21974b029f88f19d57fdca99b2d70d2185ad7d32292d5291b2a1d6ba76a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3bd0edb2552011ac222175d729fb3e362b9a78009e25d45787e4950496c7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-beige-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cff4bd786be4489b61a4a113e22319ebef104587b79c47918387801e82c8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-orange-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b790823ddd06071bc58f646f8e96bf7c7ee2c505f0bb4ae1a2a332176eababb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-black-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ced992abcfcc4fdc1051e69c55193333e19e613d56906644478124a80b30c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional-magenta-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e65947bda5f74efeeff38cc5a7ef8620893ffb6e7f640251bc62262e8dd29ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy-jade-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dcf304dc68784905c37c70890c84b179b10e9a499ae3134a5b53e062c48f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-amethyst-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3b9a92f1e02ba419ae9ac52036bd8a6cfc5c739f96f22edf0f5eb1564b820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...