MAL-2025-70570 Malicious code in shallow-salmon-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f89e41d14d1104bf47910d4aa4554012befd14f51d84f63d59e3db9e69f8d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous-gray-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080c6ce6d954c1f39eb7a248234f46f718a5e36686cb842458e503628b9181ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre-plum-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f18d427f5524845263a2025e608e9622cf03ad8c0f45847ff974746ee03565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary-gray-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2bb70f9810123e004b0450c741277730a003dfb1052885ba3264abbdc4c185c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68394 Malicious code in formidable-beige-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e613d0b91a00fd09848f3b591c616a3f0e1ea39c51dbc6f202556e7e7c3779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous-pink-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25abd71cc35b73d0ab86d548bca05e2316f761dba78235c0a24988decfc71333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful-violet-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63da92dbeb5135c264e20c205d89ac32b94cbce4580e336db340361d3044a55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69919 Malicious code in polite-gold-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ab8c59146d7f8189419a0f069b5f933859b69c519571a003248702cbb27369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68410 Malicious code in frail-black-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111204f7e92b73141c020c30724d2433b1cdb8b8efaa69b06100169c722f6800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy-black-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75456b55f2c232b9481edf00c0d94b87d9d128501ee27065cd3c35a2b0033521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edc9bf1307397448c52dd91018ec02b3d8c0e112ce80a1b095f39a38e2142c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive-amber-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf319fa049134671fc1c8cf995717a4c70b9e7769e7b81e9182f6662e1a7544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-coral-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d6ae84abe6e7eda359884f6366ebfbf0697d69ff0166cf351c0b03c352a3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable-teal-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1316af5c1cb60200bedab9601f711af00fe8cc03025e2bb6ad8051a8e188dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67892 Malicious code in due-magenta-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d07851735986648d4b300a02275cb3ebaea9f5bac02411cdf730d69f3fe57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71507 Malicious code in vulnerable-cyan-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488a0c4645362da803dcd49d0150e928b43fdb914045f97c3ba43c7b8a913c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious-olive-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be70bc84058613d237921c84661ff03ad21b6dd47293c73d27efa6e1840ef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soviet-copper-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c610ef07f4b6e47a15a61fd1b1bb6e66da27eda0864d5520b02f8c7179035c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empty-lime-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c726236a046c6b677dd899a519ea196fc2c6dce2449f64afc3281b8addb9389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marine-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a138110f729f9bb7630bfd7cc294d29fdf6379de68f3fe99b9e7990d62ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...