MAL-2025-69162 Malicious code in lilysuesu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7fde76e12d7b6be041acc86adc1a7085af7bcca0b24d874c16467df99dd751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71656 Malicious code in wrong-lime-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909de9319a8105f536fddb641b6ddb587708a9cc3785cfa30f848fb65353754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67652 Malicious code in decisive-orange-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d01f9781e1840dadfecec22f5240e358b4ffd4bd9c1a69c70a77c9680d2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68115 Malicious code in everyday-silver-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabca3d24ef9893dd9ac2ebe28868486b3b7034b53f67af1a41400f4c3cd859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70963 Malicious code in supporting-gold-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5570c8b0a3cfe16514b40291632eab8768e38054622b46e6fd1c12d1b716d73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67414 Malicious code in confused-harlequin-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce4c61db186e410aacd5611d791f8e4dc5a7a4d3f31730bf72ef4358bf726b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67167 Malicious code in chemical-violet-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1aa12bce69f8e3e270ae6f27333e04adfdef28eccf5ee53cb686ed36af20c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70753 Malicious code in special-yellow-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4806075a97830de22dd5f0815ac9dd71c27c68733d6895ad9937efadbc541aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vague-ivory-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a98975589d9ff557ab6b2041fe9348b554b9ab09e0af932951a101e9333851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual-magenta-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86502e71f7514f1702901721eeea288fde5aa0fc50cbadce058e9d360e162f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional-plum-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc0e5401da238794db8ef7e48f838d73f10794df2f822d06e26350a2fc3a940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint-amber-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56330ae901124e9d732a548eaa2622003ced4591c4c5e7ff43149cd05f9b27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national-lime-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5c59af67c62f2927ed86c5602b9812e6c38179ffb84a3142f88a482674f7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-chocolate-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97bd92028de35ee43baf50a7843956235e5ad20100b5a5211c3e01beac23f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery-amber-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b565d931ee9c549c8e11b892de50c279aa329df8c45a0f2d5dfd9d4198f489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-olive-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0940f9791e0d7a41a57b3916d05a6362323a0d6e840d65a31ada4a11f4225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil-apricot-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4652a58f2e9bbf7fdd18bb1bcd9cdfbc5f544cc85880451345043c9e6fefb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow-yellow-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62aa9f640e14544b120b8f998aab916359759a6e4baaf0e3e642a5b064c1dbe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding-brown-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140f0f0b23309eaa3c89c6004f5dc95eaaa443a55993c18be267de7ea1cf8a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...