MAL-2025-67899 Malicious code in dusty-apricot-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b34cfe110582717c39037fcb0538e625de407c1cde00e19f62faa59dac071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71448 Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound-tomato-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eff64cdaccb03c9854b3c8ffcd6319045a7164be087153801e1f1a7799bc22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-ivory-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb5d48080a93fc3ae12fc7ac580ff3d471b3c24ccef3725f516b8fa6b195760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-peach-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db12b3d27d546a3c861f8df02ec38d7d4572c14c66078f890cfd0cf3b3c7375c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent-magenta-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6679a92c7f607ddfd6f073eb28350ed737a6de4d22d3b2d3a29ac8fca4c43aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-maroon-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b1315c2422c9d9ed0123b474ca1c81e5b9cbd806da2024049eb356f0e6c01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68625 Malicious code in handicapped-apricot-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9676dfbcb65c524192ecff9fbf2427675c7ff08bf0a6d6117befbe4540a92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-white-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb629059b91801d526b9fa1b24f0a92cbf1a1c9cd8d545af261caf98a2768820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-silver-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff46723e5051d67aa359bb74848302dba9ced28e1265d10c2a79987afeda3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67332 Malicious code in common-turquoise-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d6b5d70b1d40a7a3393633e01077418815979f98db54132469fba9cd26fb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67633 Malicious code in deafening-aquamarine-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fe5c3011e02cc10b5ccb72ae557c8b6238894c822099d271085e44f675c3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting-moccasin-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2838be45bf20798d1a6f0a2c74dc95211d6282c16bede0960d4feb9d65deab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67247 Malicious code in clumsy-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb854086fbe4c5c275ea1a6c924e4d77d04d2d461b9e2b7a92624e10644dd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70841 Malicious code in steep-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8821c2cac5fe1aa35260bc2bd9e51b7e139130b9049e16b6ebfe568a86c3f5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68881 Malicious code in influential-bronze-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225d263b071b5460d4a4aa0fd1e7010cc0cfb04aaa493ca6a4a92f10a6b5494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b174b02548d65e331b2f9e83e4e26c30627020e3716295689a9fba5254bf392d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny-peach-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e4a62860b53b5aeb24a37a32f77bf6631e9245b46c8f3d5524f3e7d1d5e15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...