MAL-2025-67677 Malicious code in defiant-lavender-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d61ab6e2e6315ea624ace1a8228ae93e4e1a6da1bdfb6004ec0f547d8361231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68672 Malicious code in hilarious-fuchsia-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51eb5a4fea134fbf5fdd74c2192c26cf56e7aba0aabcae7e9b9b2b1b18f5ce4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70439 Malicious code in ruling-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46dcc80ef31cf47c1f96d0ed43757aa11369292da1f79f93e658eae25a82cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69098 Malicious code in legislative-chocolate-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b09905b97b3c436575752484fb9798270ba21dd29f4b33b5a598f3df24c3bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66965 Malicious code in binding-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8320738baead6af2bf10b6bfd6c36b7532e84f595b033ea209136bcdae8b1d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential-copper-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6553e3185c461d94f9d1823461fa82e2d8b2362e7d8930a215129499550d7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite-azure-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78016ab4b87792e35267607aa3aff485041cadc303aa35b527ceb29e49e3a6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-beige-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcb3a11c28c42967b666e42d290e301efb430d712cadcbf138535b79bdaf54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing-rose-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22d5da30b3afb7b6ad8d0a0e9914c5a5dfc04c4a0c3ca13f56451a5264efd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desirable-gold-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a646dcf63180396471742fedbe5d501db92258a3668a04d36f2c58cdac3667a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc30e1022519c899a67877ec078a99646e1cb24196c99f9a17773a9e7f3240e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-maroon-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d83643c70c2b19f86630b0db68da5a2e18acffad54594b2feb58a696a5f866f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled-coffee-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0102affe747c2e886ce1f8b8fa7373f63f3d6a82d406893a51162861a226a7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-tan-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1064e072c836f679621ff8ddd2998f854114f8b7d997a50cb917790fc9489c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing-violet-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270b712d55bd8079f4dcedb5f05af8be3fd8e84d60b8108b5e8c54e1ee698b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper-blush-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961d8e26715ae97044a0ec40a75d5e90a5ee5739627aa61b7890ecbdb7fda984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4dfe87855174c088a2ec87c7aed327e66b191959562392664b638e573101948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic-plum-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4bf09b8fd3cb03fbb2b496ddbf67af977706ea4d63541407482a8390615c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet-azure-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af537ca438726f486a4a50281c92a6fa4e5da8f62c107f27a4b5c14c1bd7a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-peach-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b144ab48cc3501101c05b9716d33f48569d9217a3408767488c15dcd8dd28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...