MAL-2025-70210 Malicious code in raw-olive-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73343bf9e516548083d1d6441d0fcf8ba2c66a1587687de7b74a7089a673cd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67720 Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-crimson-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf7e5f70a3a1dd33a7603be8cb83182735765f7f1179b98bcd402753702493a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68579 Malicious code in grateful-olive-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47864bbe42ee733de6fb4c2b9ad1ff3885f87fa2366d4d3fbf0b804bfbe4e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70510 Malicious code in selected-beige-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d698fad21e2ffddc32ff28637ba51b451d753a4f506754b49edaba5fc6ef97f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious-black-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6775f2f96fd0cdb9c76488da3896123cf7466e8d7399577ba71cd9b23b624b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6614e89063b0e03d731349443a4252ebf692ab3d3a5d1b21833bf92a570c951a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-tomato-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92256dc3156909d031ea8837a0b2eb7df53427375c89c6037d9c504993220e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily-peach-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee4681f7a3e021bea6148a34b4cb7874623c2b066178be151885c1e8c426a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd984d619842729b0d26519f5c24f30adfd35b6950d0a2e030cb86675ef5c136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute-amethyst-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac286d55cc99627ea651ae79b269b3a03ca0900dfc6dcd9719b579f54405922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-jade-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3ffdf99f319d1d2ea9ac6832d27fb8b84489b9365b2d1c444736d70dab5a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal-green-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510938070d9a14f3458d5c6caa6e4acac517749dd78d028281014e3977ade2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere-apricot-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf02c29eaad01cd6dd4b664c09c97023caa50715b2a8543fb18f97a8b018c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful-teal-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f5e59f27e3e6268d2e1001bdf3017c3c196cf5eaf367f278ea6dbd5a1223a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic-tan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5bdd0a53a46a559381e306d4ffed89149e0363891a18dc67f4a0de404ed36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69264 Malicious code in main-olive-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5658bbe8d9f66c130431ca5a7e8dddc5d4eeb4a5fa48889cf325759b36e6f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68772 Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69319 Malicious code in marxist-sapphire-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41d172ff48b50a0431c37a1a339e1ef59208943f1b42442886c3e9db564cea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...