MAL-2025-76577 Malicious code in zaki-lupis35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d97bcc6fdd7c468f8f058799fe924e9f70fbc87b1beb55026bc5241507eebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic-amber-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35317c42a641793ae48bffcf4a0c0758d3b57d63a496ccf56ebb2fce28200184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful-fuchsia-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a443dec52dd06a5ced591c78c440e4846f79305ac6c4feef5afebffd038ba8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-white-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acbc3560c7b1dd66954ed8f3f4fab458e81cbae2353a681f414a2900ffdbd33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69066 Malicious code in late-lavender-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70262 Malicious code in regular-copper-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04385f3ee96f5e0aef503af6b8a9ef430d038564364e936bb89186b4120728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71753 Malicious code in yucky-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7141bf8adc65b4424fe3783dac59cc35e718e084f8e457abe6630b234b42c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69746 Malicious code in ordinary-violet-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8134b40544fd73f1f1f67cad5ae73cf3df9bd710cfb5330fe532a969fd8dbbf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71674 Malicious code in xenial-magenta-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bbcf1f7d2a2d97796895bfb1191d34cea382c199051a16d624f0b92aff9f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70884 Malicious code in striking-copper-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb7508ea8ee8df7ac6e0a74e149feb1770aadd65f095664513108beb43b1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67244 Malicious code in cloudy-yellow-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d5f08ad02f8d3ecca2b7417e780b6e7701e007fe5fa7a6cd76aa492bd1eed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67358 Malicious code in competent-moccasin-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5566a1befc2b63604e39333e7a2d61935c1fdd477e5e841fdf3e4c03ea4f360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71213 Malicious code in ultimate-copper-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cc20458c8a7c881acd2664a615999d66ebc42dbf8c8b35521fa3f4ca5c6bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-aquamarine-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85e7e073d65129fe8ad41b792f03bb11d974f0c83148c7319403b3a8a3c3d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-peach-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05993d1c539cee9e85900d0d276da3519aadf7b3c6b6be19bfd888a0b4062f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-coffee-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f0acfc6132b8528998fb886d4413ce25343580263ed594e66e9ba714bacd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical-aquamarine-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35588d3e0469671c3e5718a6152adfe84acdea852d870378d85c16cb747a4ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71672 Malicious code in xenial-green-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b26af99d628c9e9f7141b6784f4177284f9ec13bd2c4ce2d3dd2e5564ade250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...