Malicious code in confident-blush-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe925fcd5e35ddddd33ebeeef619f38a7d6a545c59ff6212f1cce72790848b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67193 Malicious code in ciphersage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702b4e04e12a737bf96f5196e72d4446e9f0bee054445a4729eac66b64297b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70526 Malicious code in senior-blue-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3db2a55e0b9720e975f0e8d363ce90f686e5c6926b2651fe4819d11a041e22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71641 Malicious code in worthwhile-blush-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277fcbd96f556a0d28bd1bbb62327f6f4f462bb1686ab32ecab54e6df7538332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58457ef6445f999f27ddc967f41627ea33d2acb24e226ea90193a87722054d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-jade-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded18d3e83cb71125ee2ea44a631c080b5e7b1ee4dd1fe13e130b334e93f886f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-coral-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e96f97a6e6e8f8887ac9e3a4d81e6862cfb105d5471195e540fdc5904a18bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great-aqua-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eeea86226189671bb1dbbdb9b0c46a7591eb3415b02b2220634497f45d6ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69889 Malicious code in philosophical-white-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e3b1f061e78db53cae90ba7bef928f2339dfc5ab656dcd44f1fbcfdbcb96da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68381 Malicious code in fond-lavender-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aacbd0ebb318ca8d9e70f4e066323691433defa0555ef2f78bcc17da65b99607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66899 Malicious code in awake-scarlet-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc297ed7772e586c4c8b160e5272f27556d29ad93d962d017d2dfe0bf4f1b839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb020e40af0d4d4d98a23ac0f24edf4120b4a47b4ec8e83e4b443e6df0eb15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69828 Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71402 Malicious code in variable-blush-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f8b1397e627c9ae755bb8f427a1b4844f79a3731ddbfefd85a92197ac2e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69708 Malicious code in okay-sapphire-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9054ea4939d82890351d5f80f6100ee1f49ee3bc145d31cf44f1fcd56c8e4892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67386 Malicious code in conceptual-jade-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76dab5d13f3426b441d8e02c6d93f5dc9a472695a87ade9338bc6e77149d65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67121 Malicious code in causal-amethyst-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924d08655ff9ac0630367d81367be46434385e6b7d4a69071031fd686da513b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...