MAL-2025-68385 Malicious code in foolish-olive-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320d3aa74b61345ad421bc77418c63ff0f1faeafd19c20d21b99f235f205fcb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67090 Malicious code in bumpy-peach-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9086d8a078553ed2fc9ed9c6fa9b20b45c23276c060050b403cc24bec03b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68913 Malicious code in inquisitive-red-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600e16d8fbd1a9e51d445bbc9310b77616af11f1aacef821543ea418cf52f782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent-white-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235fa9d8a354ca8e9223a390156368dce547fd4dc40870e237e4d3c118002f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyeonhau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c827a02789b20087042259dfc2637e7c37b55e9832731d54ff668303ccac3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore-crimson-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de034b20a6e5ba4a2c6e29bec9c51e42f5440f1b0870ff24a93a60fdab7e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive-brown-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5fb16db51cac1deef1bc979e211362f3027d00773e1c92411822a154ddc02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight-bronze-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea71d9d4835088800f116ab520a9931b775d9a6802ed21681479dbaaa5bab11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-gray-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377fbd27d08702c79b0d1a1cdc40f97e99b2119553e5c69039ea258acb3e568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent-brown-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92dbd6087014491104112cf573b4194681ad6f5012eae47f1d3179a460191ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running-aqua-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e020ca8a7a636d75f70ad620248ec44ac6a0d856a307afc390a2343d66e1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-tomato-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4749a304e5cf0c370e44bd5e048bfa68027b5f3a05515931f48dd69f39646b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-copper-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace9b73582320f13560ccc4e992176c395b9907b3a4d9ed3385bde6871ef2816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-red-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3d7405795dc54a69eab4fe2508cd7b65b613180af0cee665c3d8c64658e4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71732 Malicious code in yodelling-coral-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508578254beb55812a524287bfbd102141dc41488ea6dba0906f99885358f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71264 Malicious code in uneven-amethyst-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e581fae095700711576a7e6f8a3b9288889912ce3600659c615ca855d385b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67671 Malicious code in defensive-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5635a35573ffca90811fb73666f2b012a7a5aa25b05950bbcdd6c400c44f7155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71394 Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...