MAL-2025-70410 Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68449 Malicious code in full-jade-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68651 Malicious code in healthy-green-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aedb54aa9a207c828c0b6c0fab42fe4f64b16b8e27d12ee887d74d70acecdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67014 Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69068 Malicious code in late-rose-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a3a49267017ecb787de2667b8ccfd34e0d22633c0246f4998eb4fdfd79d4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70774 Malicious code in spiritual-scarlet-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc977f87ab9dfa5659ad5788efcb026e0cbc95e29c00b0f6c84044daa40158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69578 Malicious code in nearby-chocolate-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8821e383e28d568e13ee56a7fc7326465188058e2dbc87278fb1483bc6b8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67694 Malicious code in deliberate-plum-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0977b0be60a202d6807a06128154074339b8b1264fe6db58d63ad56425400d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69875 Malicious code in persistent-white-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9443d1136148155802d5fcdad0fac7678a03c4cca7c360900cd41737b7416bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71164 Malicious code in tough-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e4e82b6ac4237782b24e7e8e1a8e446bab2596f17113c59e31a81d9ee7943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70997 Malicious code in surrounding-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f50e6ab0fb53662f4acfde859c15c63d52942230aaf07124a28d5deee928d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advanced-magenta-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa7d306421eceee56d7214fb6c7e2f41aaf7298e43c5d4e45968512355296a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-magenta-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605344ec81b17dbb4b0984a15266fa660dbc67a062fc0efa64be6706860ed8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-amber-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd56d161bf64b116fbd1631fc4fb48842a57f404f2eec5c9d333034f36debe70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-sapphire-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f6b019f45fc95dc00d8d7b386d771474b9a02118369056eb237de00e61e1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-amaranth-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6b0d99591ac6860baf77fb2c229757b0c65d13d182a705840c8e1b4066e610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory-purple-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d1b03182ae210c473438e4a7306662d33412fd22f735e7d495508383cf1315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost-turquoise-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b11e199d9eca893ccc990d803fa51b597d94e9c4ffe398694bf0a9c9ac5f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-lavender-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a49d7824829ccbcec70709427acac77d9eff0800942d1fde35d0872bc00fdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...