MAL-2025-66573 Malicious code in above-beige-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d689bdc49f4c3c2908b88030acd8bd522a89ffa400e01a7375ddd928e9c5856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70538 Malicious code in serious-blush-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2186240116c8ad343d24630dec3be48f8105d0f3b2890ad19ee5d55b33fefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68484 Malicious code in fuzzy-amaranth-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa424bbc31bec947e42bda53311126810e21981828bddcd20b60c1040a988797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68846 Malicious code in increased-green-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf3d329e2dd8d96640f09e937f9e9728d5bf8e7fd3d9022a9cc210d46ba5d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting-moccasin-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2838be45bf20798d1a6f0a2c74dc95211d6282c16bede0960d4feb9d65deab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective-coral-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427ccb9ec1d4148f51c78750fb754e64bea2faed1844aab10318ac5395c16a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70764 Malicious code in spicy-coral-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1583c0be87b4f163e8a941fd299b18d6ee90cb755d084f95cbdf33134d5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68741 Malicious code in hurt-aquamarine-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d639ab780f7d703fa2d1acae8ca34701ced21d79f8997e8f70239b771c3863c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68500 Malicious code in gay-olive-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22294ee6fe7388799c80261fe8e2849b38b9b4a9f73ff3183e8c105c2ddda81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-black-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3fc999aca0551f714484f9aad8636c3e4ed44306d65a0f169d0c1bd7647c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67523 Malicious code in courageous-crimson-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419b1e4473b4dd0ec98266db2e812fc976f3214bae44d1aecc92e1fa4ab8e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68369 Malicious code in fluttering-tomato-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1716607ab59656a89672f4586ee36cc56939dd82ba9beb0165456cd3e50ee9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large-scarlet-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6017ce7df242d231195866da3cab9491d600b67255f34d9f1bf361b3445b8245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-jade-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4c9b64f2d6f49f51711bb433ada582350b0a007a8065b7183950e9df8a4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty-lavender-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba67af53353ea20b1d3d6aa0dec79f63735d5989d1efa7dd8d274d70ad547ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable-red-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c780ad6a1b712823b5021ef843fa2664d96cbe0135e93b9f9b273a529be58e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67132 Malicious code in central-emerald-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66808 Malicious code in apparent-lime-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8a038ade898b7997a21e5ff5622600d43f730b4742d8795e141225970b4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70763 Malicious code in spicy-aquamarine-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf609eb7f5e1dc8326629d6d2301bc431965fd167226265c1e5d46e9ad136bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy-chocolate-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987b84d257a25254d21bf2ef814314447124a57e0cfdd1051b75ab7e555f9501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...