MAL-2025-71091 Malicious code in then-red-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f1a5fe98331be193a2517d96daa404c77c3a5e172d79174ccf68e8e0bd52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intact-amber-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665b15f9b06df8b1a5bf72eb18d44df10b157a976c3f6e8151c4b0ce71295a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14710c3ebaf6a17c6ff7881fe33b4c167e029a49b2bd73db8112103863c5721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-orange-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b790823ddd06071bc58f646f8e96bf7c7ee2c505f0bb4ae1a2a332176eababb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed-turquoise-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68508e16004b4804b6330aff20ca031404434bc9b0893a2aa72d53d85826535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f293b6cb9099665d8d33a13b6bfdb0c3a27efb19d02434a46a9bc60c3685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-plum-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca98fe964d40fca98da231de9126fc5c580bacbfc96fee992f4c4cb3b24b06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant-silver-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a7a279613344f936623f693ddfe265f85e541046659cd10b69e237111159f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight-copper-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1258aa753af6bafaa1159a89b79bfdf2da63117cd5e6cb284d530ffc74ebc0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-apricot-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412629b0158b1602c1c84a6007d27f9e4502a403f63a9894093675d65a6357f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal-apricot-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b755ccad88e432fef9657e1f9089f62dbdf3615cad9b2cdb279917b63aa7455e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present-plum-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8310bdcca0adb4fc4040db88c2109b3c294030599b7a9bf1e36f16c5d7cb825b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-cyan-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd637f1e0b9776e4858438e6422bdb6f460cd72525436975dc30f2cb413256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual-turquoise-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5656eb44aaa094427fcb494a122ef8efcb1557b55a785ccff22de593838a76fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful-gold-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c1490c179356d8f1ee83ab71102dea0e36e7478eb9bf5a6b7a8370e1431ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69306 Malicious code in marked-fuchsia-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db60ba6401dce1dcdcc8ee71a4f540a4beed61d9ac0d40150f944d067d986422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69434 Malicious code in missing-orange-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad0f023e663bdb05ec7c31243516140dcab488c44066ca22e81b69d493db54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71429 Malicious code in verbal-plum-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b496d1ab241484cba97418c9cc84d80d0a343b2810ee771b907e40463cab3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71182 Malicious code in tremendous-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1c94553d2b20f6af994e3a9196c4c4a648575605ed9353efbc2e323e268317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...