MAL-2025-70315 Malicious code in remarkable-copper-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c3f9d83e5d2d78130d8059de0e25fc272730968b3b8e037bed916038dec3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70863 Malicious code in straight-pink-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faac6b1361fef3f7dbc13df386c1f409609729bc4ec04c99543b040ac5fb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67115 Malicious code in casual-amber-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749c1c107c480f5e02a82359f8690e2022d1abb94b9da4aafae34cd41e77b3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67523 Malicious code in courageous-crimson-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419b1e4473b4dd0ec98266db2e812fc976f3214bae44d1aecc92e1fa4ab8e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68316 Malicious code in fierce-purple-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e5cc50256b998c149693e2bd90761f604b6be555fe4d976e50edf52cd2e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-ivory-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8dc6f6e4686daa2d21f377ef1a92018323685cdee5286ecf2093b76480dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced-pink-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d659540f7080253831d43d732d9bd864ac2dedda2e2d12148cfeff1053b4f07f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-scarlet-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f579405582de98dedff841b6645080181a2c9a4cc838b12c9401f937f45c2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed-peach-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cd9f9fd444c2f7b1236af3824a6c29d6aa458a08367e2188e94454f5aa55e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cd3636fb3bbfbea120b4b96e14251b65d7f6d8ff91ec0fc0e3215fe4291154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulatory-harlequin-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4968753ad38701ba2dfe12d95e50fa0c65b03487d7b4e6f8539ab31338e596c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich-silver-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe505f4c148febb219f0ce999730fc2358804f7748f16907af01ac6dade974e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in armed-brown-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7aab827817b7301529dc65b2932d1698c9aecfbc964d4051f04929174a373c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden-black-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a31d7782549b1eefd936044d98c8c39186242defa6fecf574c2f40aababadd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fcc62ad7a18c6227b16961d6a4115d7edd8637fc633b33529bec5fcd49bf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling-teal-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612fd801148ed5818c5a011418140b35015894a1a1726ef58fe74f9622a66856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...