MAL-2025-70497 Malicious code in secret-amethyst-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c8de8eca33dcc775bada0f3715b073561aca260396acaa394f93be6386fdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68883 Malicious code in influential-salmon-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420de980d7bc44a88f0b8266fcddfd0f16a2b277d0fa4f11287b82db291a597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67277 Malicious code in colonial-aquamarine-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a14faa3d73de40007ba369f25d28d120b9d7a585844c93cad46db0cd65a63e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69181 Malicious code in literary-yellow-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1595a9bd2622d806d6f177db48601aac68a25593cb57355b1b7ce02cdcc2bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69762 Malicious code in other-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896b513c2cb00510aac6d963fc128765f95563c6d1b31fe30ae44e653cee2fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70271 Malicious code in related-turquoise-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa16169abbfad247b206b122d4658ac0f26a68d4eb4ceb37f648d30eb68c272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71497 Malicious code in voiceless-beige-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d271aaab1f2c710ebe4ab5063401bb9e0db552d40ba4965cee3a5db0311c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70190 Malicious code in raspy-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef129651446b88b9b77a46df5ca19d2ae7fbeccc32edd865b74f41626e7edf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge-gray-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0865aed4628cd02306f76af1e109e928e7df969c16ecf5a2726a61b109beea70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66719 Malicious code in alert-gray-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a256918cb2181a2827aa7100afb8b91e32727fae19bdfb877eaedd8d87b8eaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71354 Malicious code in upset-magenta-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd465043101730d099d86c31167441fe11423687e0042e3218237f6f57d79bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68235 Malicious code in famous-aquamarine-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0725abbf8ef50cf834e20056cc79d960e5884cbc25681243a2383f61bba797f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66890 Malicious code in average-magenta-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9e6650658a0be1840a7a67228ae568df9da6f02cfea9aba4fd9eb65e1b5f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely-cyan-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0e0f4ed93b6c5a872f35cf86bfc8ae13d8e209df79e554e42e6a5c6ef7f5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor-indigo-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195250051088e480a83073204add7481d7e5043bb039e0d1b54c82cf2347b15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic-black-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6839e844714b6c35420aaed2c08cd8e17864c5af2e25ae1d28ff3e14c8ce172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-tomato-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5f55a6c2242fcae8f7e9c33d86bdbe00fa0c458c86877ea1e8edaf4151858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd3cd059baf8d64562f5f2fbe7b79af39c4969c6269227bf48a5c572de137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...