MAL-2025-67539 Malicious code in criminal-aqua-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab92c0dcc660a4397b309589c23fcdac382eaf542741973537e39a51e9f05b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70259 Malicious code in registered-magenta-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbe99cc750fac6d8c04139fc317efb47e14760aa6abdf994f70f6cd9b1642dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-rose-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d542c9913afabdd3067f0e700abf292bb2c8146498c6463dba237779e5fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-emerald-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8950f91d59215f3c6694e5a9c7f1403d26bbb5d739b75dea3327cb78e5d05c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad-fuchsia-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807679db298f387cf489cf9dcea6db3d6142d87d356389a29622e7ca9775212a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hieuil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67eadbeba75e1135e2ab9236e48fea0a4e93682441de3461cd59e1c06c006fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary-purple-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92541f2176da2ef52e94f099795f720d65ef1a5f8610e7804b0e6a5e809b610c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible-amaranth-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3089ac9b806029416d35e7fe09c3ecfce49d0567ac83709e0b22a42d0dfe561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft-violet-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b40a4d69aba395ceacd4ede4027eba92316f86a4da34d48027a6f7ad063e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ee274d8d379fcb47e73967a3ed7b93d0f3f6febddd5fa80af85eb6da54912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-emerald-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9e6163fabb8bd0a2dcea5d759ec8ab24eed059030b6db14a6500bfc4716546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-emerald-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical-purple-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e434b90adb4dbca10ea3c44576ac6f709d282d0d590f754edbc63d4d968435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content-magenta-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ee92f8bdb2d9e916825d74839e3dfd2f42e2e85936903e9f2b642c22a68298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast-gold-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8b353bf386c8a02ff71dad5f263e5d567d080ba6860463056d6d703389f0ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-gold-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a1a5bd365f6d1d96cbf438bef8da0d28c1df33bffbc64344ee5af752a58f48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...