MAL-2025-68322 Malicious code in filthy-silver-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e6082061e4500be59c888d5ec79661d60c3a230556e7e9bb62e67d8e7a36ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political-violet-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4f145c201c8c2a3eb75e5cb653aef95cde826439e92618f4da115075f1d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given-aqua-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fdf20206722798caf1568c47e9bb222f45356aab9e739fe6baa55129e69a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-copper-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d19612d963cde1e745732f0bce077c191b1406ebdc0270f63710f8dc1ece886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable-plum-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47b21979d4eee5217f451c37e5ee4ad692e81b27906507e83bb9723ad7e4b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude-tan-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ec296952f476fd14566f1d9ccdcf4691d71a42ea979e4bb1f944ad7c9b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-plum-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e570edf098ff4ff8ba812c1c9b406057e1ea61acf5529d436fb67df83c70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b32c6a3f358c4252a5fcb7523371d25da02c59293169cc3411d8243df525ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-violet-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea795bfe44fe4667cc7c648ba9aa25928906582ccdb1a9c9108adc9dbd41eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-aqua-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4ee86280906ffe93666dba0480bcc05a4e270ffd2ac98ebee38d067c9a329a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-olive-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ac10842dafaac29c25240868e9f716fbc18a8e4e8dd28f8ab52982d5363227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national-turquoise-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dddc68b828f992621dc3ce6210a86f67c0fd1a20a84713ced490cb49f407b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden-blue-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18ad4a44059541fa7416639e47b21d2a290bf12152e6e502b126be13b46b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-pink-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb645def62edb4bee8723d3d08a9108dc9c12888d6c28e11632855c35b2d21fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0faa6b2fc7eefa5085748fa905af2d69a1ea7b5171aa839ffbe6718cd312838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological-chocolate-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be91a29818cf248a10a0e9bd8c25e787f9eea5d232e1ca1eca03ba2afcbea5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69629 Malicious code in normal-cyan-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb5f609caf52e546410eb31d954d6b07f9be422a3a71a1637f86b02f674ea0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68047 Malicious code in enthusiastic-tomato-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e35e2dc983ea87210a60ebe7c84b0d86e482639d7e7b501c9fcd372b8164ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-cyan-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fca3a7b462db2e0c9bdd74555f00f28c29f87cfdc0f55b424281c3bd93ae4ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67038 Malicious code in brainy-magenta-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f59f32491305de009093e0bc98621e3132083219767f593603caa6a098ad18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...