MAL-2025-71394 Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67573 Malicious code in crude-turquoise-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938086f94c4c18208325da93cb19c8ccfa20a76df1a49091d7c8ce6de0362661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative-jade-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90542b7105c192894ed2ae9dbb4b05cba2a5ed0eca933fa5540056a463ebaf4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic-silver-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204aa8a43f8fb421f77a5fe30b1d9853963778f322a39e7283f6e65da503ef47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar-sapphire-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53808f5bd9400c4f2a088bd6d7e0ebba996eef66fbe1c380418c50f734eac4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68017 Malicious code in empty-amber-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7a98a661f0516b3feb2851f2687a6270455c3f28f2c6ce07652da8086ac407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71313 Malicious code in unknown-amber-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8d0b33b88c4f1bc784009133b17d7d36a822407e47a023823cc81b77cbeec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-tan-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1eb809e8654630a97ed443fe4c69a6327c99d18c715c4c2c3b7cae2dc9bcf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female-tomato-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf66d89a5fe35f8e5d283738c9d1a2f46c3a30e201574e499dd5c11499b0c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual-black-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a394818943d79f41fdc56d4fd7e146087403d867fc1b6fad3e586e386a62848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate-apricot-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9af5f501e85007259915f179c4faa7daf0d29f62f162369b706ce2f8aa53b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divine-bronze-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46dc5d35f654935d387094539a1dc34108442bdf966855c0d456eb70d5a0c8b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67725 Malicious code in depressed-lavender-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd69e490ab0caba8638f725426efdf3a6177a6ea9fbf8bb920e73da61aaeca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69004 Malicious code in jealous-olive-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad385b8f645fe1c767b20dc605ebbb7ef0785291e7669ef10c554ba42369ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69805 Malicious code in painful-plum-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086023496572a3e9e6a529d343abce1623bcf1759063f3de65f389d728c610fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit-lavender-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f04bf2886cca834220e14b0e33d15dd723cc3f8155629f7546dd2056f7b5734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416d23f324b0978398afe760b31f554fcd5bdb60a1a3e19cfbee364c83e3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-chocolate-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbc3ab96e2063e4de4fdca12a2495c0f90f717183b7425291107897c8042595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-plum-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086023496572a3e9e6a529d343abce1623bcf1759063f3de65f389d728c610fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...