MAL-2025-71136 Malicious code in tight-copper-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c4b63883ccb709694df00325e9d5182362c77e2eca8efbc0dd2ddc84e32ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67769 Malicious code in dirty-bronze-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8b3672e79c743ef6a768816b5935d376af08ef3ad1646edef80de5df3a3b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71086 Malicious code in testy-red-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56f3e6145386241d0d244e09a9c99feb04f225768591065fb353872d0f8b7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70128 Malicious code in quarrelsome-chocolate-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3650bf43c5209267f01d830ea9601eff058cc699fd68d00f4d84c0549c8b8167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68970 Malicious code in intimate-amethyst-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98228dfffccf4c886bf9b3fcded1ccff70a0cdc6d8e32f67e3c7b591cfe68087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68818 Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71177 Malicious code in tragic-red-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80a955a95232c01fb125cba918ee9d5f4c17af3b8be062707115fccc8a0a4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69553 Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68626 Malicious code in handicapped-apricot-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db44263c50a582bd54af265f0bdaee2aea2de081a7119e74afff4ca5d667a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71165 Malicious code in tough-brown-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65eadd0dc03c7cfb53d379280bfc37690748319b29fadb5f944aac41fc8dc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67525 Malicious code in crazy-amaranth-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545911492793ed2d6c2a3dc925efe9a434da5e568bbe565ffa3d61d6851a390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69764 Malicious code in outdoor-amber-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071f333f0d37b6bf2a313cc2a41cbe847a62a33ca509de552a59db3fd3e6defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69800 Malicious code in overwhelming-lime-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a2b2a820eb3357dbe28a474bc68cc5331fb211f6b0a76287b86dbf08c026ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful-pink-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0daee748dcbc689f30cae08ab1c8dc7426eeb1bb490394678ce858aa33df1108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integral-lime-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326c250992b459766cd0026d688c403c64a8d0743408c3f391343f604b3b251a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-copper-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace9b73582320f13560ccc4e992176c395b9907b3a4d9ed3385bde6871ef2816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a281832f582a19431f5da9dd80e9d556c29d4f7c0423f55eb66cfdf7996dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...