MAL-2025-70643 Malicious code in skibidipap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fe20def72a331ee3bfbdeace05a5624841c9a2e653b236ba15f6e5812e887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71020 Malicious code in symbolic-black-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868c938b61e64431898edd5f7b1fc02d7d459950838bf0e86a4eb4836782cd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69318 Malicious code in marxist-chocolate-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1bc9040c79d280650244ef558f1bf957ba521f59f9291f8dca1a89649c2086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67939 Malicious code in educational-azure-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd023a0a5eeebe26572304c1559e85e68c60bf58946bb10ac37992aac785c092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71710 Malicious code in yearning-aqua-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0baf40dbab27f90a51dd28bdc0c86e013fc44c93b0fb1969ab6b4232956d388c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67695 Malicious code in delicate-amaranth-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4c1fe1caf03cb83503baf79cefdff343f4819d9c2db75d7376479dd2a9aaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70580 Malicious code in sharp-green-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f039ccd40a517295f39c888f7e5523847e53c5c5e149530685d1b9f8812570bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70581 Malicious code in sharp-peach-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed8f7bdd28dac7d699d6fd09dd2351d371ce322df0ac941b1941b7588ae0889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-blush-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6be8e8a611a4c10be1b762ee7b83a9b1948a4bcc3f1ead38c2a3e57a869e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide-black-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55392b535862c6ed90e2e9d1c91c276c997a843b931e069d2989c0c5c39573e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore-lime-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c06268a8beae1efe9ba8bd2e59cf4950320241f1b004453fb1d90d07cec7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-scarlet-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6370338c97a99e7f714140199817ed60f30bbbe5b246c01f69085eddfa152ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e4e82b6ac4237782b24e7e8e1a8e446bab2596f17113c59e31a81d9ee7943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless-ivory-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c076ce1f3ed7ab09274e3630928c51d4cf51ac9c1f23a6f73e5a8e95408601a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery-violet-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873089d676c3fe0bfd28eed742aa883e61e26b5d112c57843fcf87ca72091fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-white-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16495ae2092b46ca41fd4731cb90c0aab6b39bc28069a8b8ab8ccf8df05bef28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-harlequin-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2d71d5cee5b1f092013b8e46ea6ba365d5eed5466ded9481e2a9a0e59e6e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable-lime-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3629ff063335e12551b1ff7b2ea16aa6a21934bc59274cfb5425f7c969100d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f933137ab6d7196f261659bdfd0cf3c4641d58e8d9faec7f895d77db332c74af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon-olive-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a4078fd8c75c241a22ce02514b11d1a0ac4d11871e7f15c7e5dacc6fa8d33f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...