MAL-2025-66860 Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70327 Malicious code in representative-crimson-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d89cd3cfbb5376aa8091140e6c592392eceb6d841b76826f1d7a000e0d4d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68269 Malicious code in fat-purple-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ac552c5fc90f7ff7c595898edf65e6dbd0787e8fcbdee3ec7fa8c301736867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70794 Malicious code in spotless-fuchsia-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fa327a7424308a606a7d79efafc8a0f289e57753c684461b121252eb829379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71439 Malicious code in very-peach-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8454fadb8b0778147334e2557fc4b7c11085bcbf2b69b00e1b11bf48da85d0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71584 Malicious code in wild-fuchsia-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def211c66d852174eefd2de3b24a6f80b5b721a45e9dbfc0eb0e5dd01af6c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67440 Malicious code in continental-amaranth-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ab873b1dca28b41f83cc97ad3dd1217640227e86f74aa457a391bfb37f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67287 Malicious code in colorful-pink-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0daee748dcbc689f30cae08ab1c8dc7426eeb1bb490394678ce858aa33df1108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70616 Malicious code in silent-coffee-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ff3223a62a54a89e678df6f46dd92fccd39ae7d1d69ff9ee5a79efccccd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68056 Malicious code in envious-crimson-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54453608c7c433db63638e16858dd55b12ca0a7644b3b18878d6ada3da93b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67425 Malicious code in conservative-pink-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6c8eeb6c052d5b8292efa3f04ff30e890681a243f67068b414b6d05d99fa1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67498 Malicious code in corporate-sapphire-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ec4b4db9224762149fceb07bc18ce16445721c65af4bd38c48bff1602e98b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle-emerald-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91158e29d2ed753c31db36859e2d095dd67916f66cf9aae6d49f0de315e9e2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed-apricot-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8990d126ce53efa59d01f946e1cae0bcc19e3512db6a55fb3b76288f8b6123e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying-moccasin-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dd18461d8be2110e18768c5f5ad74fc90e5c31137fb88dcec47a9b0734380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete-tomato-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752c4fa05593f3dda52a5d8b2bc3ab74cd1b2e288f2a4801426c069eab1ae139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c7cb59724468e345ec22cb0e663c032f176fc9cafc37dbf50353bece2c38ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile-lime-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e67ce8a6a8e2637ad7552f455b521cb6c985e4d49f991b430115866b1372713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-magenta-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f454b10aac316c8b8ee8107a4363dbb35a6765c2df3aa2115aa2cd82a4c8c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental-coral-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7e5bed4cc7668cafdbc2747838c8bc41a82ce8eabff2b96853a7a6585e5efa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...