MAL-2025-67264 Malicious code in cold-fuchsia-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025f11fa3da31d396c919b210e996e642057ea1e2786524270627f829f3d82bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70531 Malicious code in senior-lime-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005cc18c2a29bc6b0e090d348db808eea0a1d3d031df3c0a1771661eafb4615d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined-aquamarine-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d817ad13ca89968017d865f5bb31775134541915681dea923142bf75a8f820a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm-pink-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d014cfed02bb62c547e42464698300f75c7f1c8b91602c261eb8e17a9b6f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-violet-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55274c1d9a7556e18b8a3aa0bb61cdeba0b19cbaabbf5f7c88f3d9dff9e1d139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct-tomato-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca53f4c2cffa315cb527b8387c96e171485bb67dced36f6f941864ee4a39aa00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69322 Malicious code in mass-plum-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c150a916bc8e026094eb584ae62e81f7c72fd45faa1b7940e731af5936b540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69192 Malicious code in lively-gray-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc4c7dc19fc1cd092969e3a824e20c12f3d31067f221559bc343affcae20d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71570 Malicious code in whole-purple-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460f4e040742f7776bcb9f4905a647fd6a61871fae4a0085a8494e5f2d57dbf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67174 Malicious code in chosen-cyan-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd2fae4f54a03ec32a8320921731f7c0b454d6ddf2fa1650300b75081df8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-coffee-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdb471f1a3e5cff8348003194c3ea4d7198c60743bf96b93151fdf5f8db0a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70222 Malicious code in realistic-lime-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea3da6e81afed7e74bf24dea666b566c8e6c20492d5bb77df61ac1b998981c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae69308a597c1676f4f4a1fb2c4eadcfea25ce30cc0e5b045233814fb29851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-olive-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e8dcce2390235a89528e3abdf84a3fd3cd54b1f7b2b010b53a7a060c0c12b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e4e82b6ac4237782b24e7e8e1a8e446bab2596f17113c59e31a81d9ee7943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric-moccasin-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503093c035614f8baa37cf3e544f3bfb46bf9e6f5bad89b00a7e683d6a7dbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6627686f131b3f859b422f1c842cbad7d2ba637fc9b6c34b91ba057a50e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful-black-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ae53f2eb52578199cbf8d0beb90794928f64f8f4236e86598d647de3d1d59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69274 Malicious code in male-bronze-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b6576d4691ec1a340c27567b4ca64d57bb7da944a532020a3373df0c4cbab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...