MAL-2025-68827 Malicious code in inadequate-tomato-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275eba662f513c3ec2830eae649e18671c78f183abc9bbd6fa8a586853b654f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68546 Malicious code in global-violet-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02a8a57e4e3dc1ca4348957c9f7b5a23b0144e10a83155b7ff7d0f43be27746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid-indigo-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b7114e116cb7fa93ff32eac3c55e94d83190f3837fea48ba5a55739bc461be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in realistic-salmon-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6182fbc0961331903bf47a5def3f4057d85647ab5c6343fd745c94d8ff6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67797 Malicious code in distinctive-harlequin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416705276e35227a7d9261c4d6597c3de24f921fb490a0c9db23ca31959cd50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow-violet-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c38d12a62d992bb4178b3b0bc08b55bb74212dd2ecc2968ecc5f4de78098327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent-teal-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f747d39c6eed2c1f0f58ea7687ff17114f73a16b1b4b16bbc8e11dc51a3e8503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete-ivory-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95180632e1172fd78c5b8da08621e886d94da9d4fc860dcee48fb17e93052d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71252 Malicious code in underground-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8509cc110f018c24a34684c5420f29e8c875ce1fcc86e8e29e43e0abfbf7e5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71225 Malicious code in unacceptable-moccasin-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa91b2cf207cbe5efd2615f25e3a2f608e24575a842e7e2f8b827f377f251fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70103 Malicious code in puny-purple-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48cbf10f58aabd3749f949ad7013330b7d21cbc0451570790c9ada9791b7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68141 Malicious code in exceptional-olive-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6559adf490b72c6743b31e0e428e1a0e9f377bdbfb0f2238ec95c7e6ccbd62c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69052 Malicious code in kind-rose-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6896e682c287831b55648206b32b21b6065a454e4d148a738d41def8d7f649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71486 Malicious code in vividvortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2c046c6598bf76b4d7e9ec14900a3850a0770c4b8d5d8d74690d3069a5dc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68305 Malicious code in female-tomato-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04325ec8a06ab188caf9a9c153da3914f8726f96a5cd0f6362f4493cbc170997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-mie38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3293d2badb124d6c065b42035e3e61b21271d3399c209ffd820aeb8442199e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35186290911a21fb6329888b9fb5ac4167729129f68890809327c9c4e6560dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-nasisayur67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba7eee164258b5c396ed85a47642fee0d498df4a0f8b4ca25afaa74a4704e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-sate54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1f626d6dbe09e982754f94552803282ae3b1e327f47b513844be6ae971a410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-sego67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73bb5e74706b8b95a8c6aeaa7b5251b89c7bd282f2199fc8bae690551af2fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...