MAL-2025-69082 Malicious code in leechsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50db7ae6a1e0fc398d65dedc6cf72c6d64a5b84225be60798b09793bd3ce0159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70106 Malicious code in pure-crimson-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8b29662afa68a35d4ebaf415ebda6907220b0d7139e5bee491f6b3e6d80fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69126 Malicious code in lexical-crimson-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1130972238df5559e663a88c0bf242a0a71cb718305cd4be0e67e110a84611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69156 Malicious code in likely-rose-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc2f663aebc7843bdb216108249a9ea241ddd81747759535160e2236e0e088b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71436 Malicious code in very-gold-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fd09fc637b8c273531f83e803dcc9d2c3c36319cebca2920f30d5dd6043310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68675 Malicious code in hilarious-rose-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91abb65a5ac6234ceccd4d9c5bc68f74bcceb36516048374b12845b230099f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69364 Malicious code in mental-turquoise-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bea37d9ebdabcb541c0dbd5823ab75a5d1b6ca4d5a398facce1348448c7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69856 Malicious code in peculiar-amber-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa0c652dd015072847a6a59bc198a8aab719d51a8020d8a47eabfcd416dc155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66869 Malicious code in atomic-scarlet-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74b15ad2ec416cd71e77d02094929a9f12b4c3f5043985d4534327b63530dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71123 Malicious code in thoughtful-cyan-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94311306cab5c29716fdbf97c6cc774fd21b4f3b108a080b98f67279e6f357dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striped-scarlet-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a787a63e76d246ed55b83dfaad2a5916c6d804d0c6184ecabe449d0de19425f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-maroon-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6971363f2f77caf154260d2cc0d79347c015b6e3d510398e08784974cd4f1692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-copper-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d19612d963cde1e745732f0bce077c191b1406ebdc0270f63710f8dc1ece886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-gold-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart-apricot-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9baf09a9bc82617166f5dce478d1ab087dcd8b7f528710657bcd87ffc50a4944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary-amethyst-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4007d6cbaa7e43548701b7e128d540ba96d7ab7cd33cccd28a96c4d69fdfef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7544ec1cadddaf841dfa15e92e54adea6aa8cb3dd8242d0bac825e2e2a4772b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...