MAL-2025-70888 Malicious code in striped-lime-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5758e7024697d8a58d812aad5f954191180344c335fd39662da119717e9c3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67902 Malicious code in dusty-magenta-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64eda07b06044f0b53fe5243389746549d2964982b07c211da6608518d61786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69828 Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66691 Malicious code in aesthetic-salmon-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddd9fdefa56d8cfb917e42f59b538673173d341e5a1de6437f11f028f82d35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70097 Malicious code in psychological-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b28bff64f07533a7fde60a1abb6e0ad7af52d0d87c21db63daba06ebabfbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68086 Malicious code in estimated-copper-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e090fced1bc3b2148f98e8582bae050046128dd03886782a78e9bc7c74ecaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70943 Malicious code in sufficient-gray-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ad634604b777986b78dbc744078826281253106ee45d64b603e793b74f60c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70379 Malicious code in ridiculous-emerald-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa21c7bc4d07179d25a4f899c3defa643b8f801569f1185721a1fcd1f08c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67278 Malicious code in colonial-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160156899d54efae165224b9de6a63ad9d79c83010fc660a3dbf1c0b4a779de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67372 Malicious code in complex-jade-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815a719b585b622b13ca83a1818128b59319277cbb85f5dbc1326fde0604a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kembang30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c173b242bcbae9b1285b47b1e030a49b95effa275b9be0eed88367cf6a5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716066ca122358390cb5939bbfa631e309318fbf9c9a5e80177a5c46a6cb7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-mendut46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0532b7440891b42bf855bc7e11e307592668e013f9251cad5e327f65c30dee43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue15-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477d949ad1e8d906e7984ceac53a64cf59bbf3db6bb6b53e732f2a41c29e2dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tapai66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05215451d09a47664e3de366b2d8a9f6870e97a101a011625ccb431173649e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae52e38134c8959a6b9591f2a174638cf1bba21ccae7f725715f63206da439d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-gepuk36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4914afe5bc8c4034fc58159b371050445022764792c4f20224e8dcb264dc1ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c5b1e8864f4be5bf9d95ab08b68529a29f2b686bedb6b92c7828ce40a1e62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...