MAL-2025-70511 Malicious code in selected-brown-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefec0aec95de5deec86e4c8c6151adf56b0296297ca2c20fde10db7bead2f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71234 Malicious code in uncertain-aqua-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4845454970584fe49a9dc1de19b152a323db0038dbd672c980b87823fba31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66743 Malicious code in allied-lime-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f5367f8dbf65e345182207060c2655dbc0ae20fe32e1929f6648d4bac6d834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70270 Malicious code in related-salmon-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfece147277f66e04227a53d31516d773e79810b9f5e5dead4326db92009ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67892 Malicious code in due-magenta-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d07851735986648d4b300a02275cb3ebaea9f5bac02411cdf730d69f3fe57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-ivory-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb5d48080a93fc3ae12fc7ac580ff3d471b3c24ccef3725f516b8fa6b195760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine-black-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541a49d5a6fb5037346092fd2142d4dbbb66fb9769192f8beaf0dbe38bf45763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal-amber-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe934a4c075b93f09e518998cacbf44a3990fba13cb1dbd5ddf24cab6099ac60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying-rose-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d3002f45cef4b61af531db899b943c64f399a6a6ea6204a4c0591c736b56cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary-apricot-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbfa978e228cbef1cea3b0e9dbab1cf04eb98a63d54d4daeb22794fc55b6441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind-amaranth-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698e76686e61628f27e10e2a84158cdf025190b7bd0fe4fcbdfc37c2cd441dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective-chocolate-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70aefd6d38ab7d66f27b8844eee7833285fc1f680d921a1662a574f84faa675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological-lavender-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1666ca9c6f38ce533b9cb5b0eb4646770d7d2bb5718a064c2f56307bbe5a3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71756 Malicious code in yummy-tan-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5185cabb96f550e73a8c0a89645acad905fcd5f859edc4aa0652051859c7fc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71195 Malicious code in tropical-moccasin-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb241493855ddac7d666d00f4b9e915b9605d107ecad10422338bc7d0a0685e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71340 Malicious code in unusual-coral-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acade8225a1059f0339a9b5e33795261cb49cdc30f454f3d783fe782bde1f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68667 Malicious code in hieuil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67eadbeba75e1135e2ab9236e48fea0a4e93682441de3461cd59e1c06c006fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68975 Malicious code in intimate-magenta-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae17079b44effc32e36432a0db0d0c98d21ae6aa32985e55d5dc62d22a807b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68604 Malicious code in growing-fuchsia-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377551a11b126fd94603b6ba134b3eb8673a0c9eff870a3e1cc0a4cc30d3b75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gudeg4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83797ad5a8dd6f6b02256f9cece2cde52105a6369f81fe8d9294690710aab2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...