MAL-2025-70408 Malicious code in robust-gold-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba42932df7d8bb63e5d3c1050731f5c66bf4631014b7128d9163aaf53a52a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67827 Malicious code in dizzy-aquamarine-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff4af257592422027ae97e3cfbeb642bb58e844b34b151b461d62d42f53822d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-aqua-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da88174e0d78ecabcd7c6f2b726c127f1bf22aa9800e103eba0eb83050e3ab32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental-amber-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23d833b73363e0845373bc462bed34b831f6b9fcc2a1c8991ab38ddaed09542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-blush-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427fe9169032b942c97c8ad6dba0a30034269580549104fa4935749ce3dfe045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68527 Malicious code in given-cyan-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8172a67d864bbefc2fe1c2d690269f50ee2070cb5493c416cc89d630fa81ec7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69084 Malicious code in left-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4266c53a070f62e5f17159b2eb674432fd85587c83a286f4c5420bbc2c6169a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect-gray-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0113346982df8976ba990178d180c7c2bbdfa0154fc0ff4baf5e48dc35f7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful-cyan-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a04a2c621fcbf5b89b8af85bfb20beba1fa45710f8e6c40895d2af39a5ca7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious-brown-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80a2889cb118f403614666918dc57439564864798d8a18723d23d9e904d9d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68478 Malicious code in furious-emerald-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91959268af9479bde7b4fb74be184a793899fd7263a089aea33a8de9d5284894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-amber-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ccba46be897fafe5c7e950361a1aaa247bacdccea9c6b229b4ca3e5db14247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69458 Malicious code in modern-cyan-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0106c443938ef43f1ff62b674e4700c5f06222c75c22d01efececfd7c28f65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69616 Malicious code in nice-copper-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7178d967b042fd09ade3d97ff36884b6c2c094b8bbbe4ff710f567361325c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70241 Malicious code in reduced-salmon-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7d56ad28615d53d8413a5744bc1f078d5a1af32e30ce8b2b178bc94d7cef08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasi31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7cce7f2e9cf638ae25c5ae606c8784172519d05e9cfb964441eee06f193d9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gado-gado11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f7dafcee432b443256c641141c827c4d7e4e5ec1b4656250ffd43379e8a4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-ongol-ongol93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f0933503a300e58333b0e0cee79cffb0f933d0f3013f7e50af9fdd363214bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63352 Malicious code in hendra-empal90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade56903967b4fab3b4d86f4a0a8a81853d4ef4414e441f9c8e6f51e93ee31b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...