MAL-2025-71700 Malicious code in yappy-fuchsia-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae00a9abff69e91b03facb109a5b60c165354dcc3959ccfef8855a99248dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69481 Malicious code in moral-beige-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d349a0323e989306aeed79335a104fed1441eb0cc850fc058d8a9159e8830de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited-blue-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85176b6f4eac9a75f4a6b045da6f7dae6b156636474453fd5d2dfba40ce06e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official-pink-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5000e62f06106ab11742d94e64d45a09a2614570a774a4e9ca73c455ac0d1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior-gray-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef7b1ed63b8c35bf069d29abb82371034d7820707b99b32c72a50b304037655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67218 Malicious code in clear-amethyst-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb4ce55da3da3afd5d9d868d43e2f72599d0c773087acd1ea171a4873667467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67075 Malicious code in brilliant-silver-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138babd2e9dc479d5d7b853045d1d3a8129be15e4f824d3794f26a79e5228fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68078 Malicious code in essential-coral-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0750ff917e95d976d044ee0850289b332a7449f3d605c39aa56ce1688c885c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68970 Malicious code in intimate-amethyst-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98228dfffccf4c886bf9b3fcded1ccff70a0cdc6d8e32f67e3c7b591cfe68087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable-turquoise-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49817fd42aa1b0250b1f67928d31cf5c034d49f4caf133b1bac6e5b05217ee7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71142 Malicious code in tiny-amaranth-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e9063f345f407edf15ce0bca25c62dea86bd6c812c68c66d90eaf10ab640ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped-maroon-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06316599e08f2ec230d73116ead2cad9baef1920ca6813d3ef85b75ec08975b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70700 Malicious code in social-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f293b6cb9099665d8d33a13b6bfdb0c3a27efb19d02434a46a9bc60c3685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71585 Malicious code in wild-fuchsia-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50525f3aeb8b5ce069def9394862038de8253150b232510e7b08c8be61b73be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68050 Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9caed1b88207ca4314151a8adcc7de9b64a987e8d4f59457306e28327484ff3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-soto74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b9b246c67466eefb951fb70ad845869024e09a2b83686e16f9fc41ba7f2f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...