MAL-2025-66938 Malicious code in beautiful-jade-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9032e564c55b981d9d53f08cf3d0b27ab8bac66cffe7c9738fa677842188dd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67251 Malicious code in clumsy-white-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5cab4f4e1e4901e5bf0b3ba11962e9d76641981b82e748f705204191d801f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70120 Malicious code in quaint-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573e39f6bd7ea9fc301b52f449775fc87f6fff68108c35c3450b012f30133a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71671 Malicious code in xenial-green-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec642678bdd4ba4ea27afcfa4b7475d087b1ccf4c47af0831988b6d2be245a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66933 Malicious code in basic-bronze-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f972d9f1a53e3a9e853520ea9427f50296b1f6bff15028c3779a72e80c1eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69335 Malicious code in mean-tomato-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9757aeb8c3af186297585679201392f9a4d9d6c26e54506e23a79b080df695b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68874 Malicious code in industrial-harlequin-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cea9ed72a0e945877f24baaed2ad44e65f6b4d20233354a5cbc890ee1be10a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69457 Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71377 Malicious code in useful-silver-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db93b225172501042c0f0130a868e665c0b24b4b23726abfdfff336acba52849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67693 Malicious code in deliberate-plum-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa2251834590662f9914ce5594bd03718ee5f7b6aec3f5941546dde254511dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67711 Malicious code in democratic-gray-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c78fbf4ca73d27ebcc920d9666942e4b8f2d7f8dfd4e5200332e7d8038a1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-scarlet-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b405a6485b23b4c9caeaf00f00ea0c3ed6c3ee6b1a0dfe9b8516364b10a2be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-aqua-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d98a6cf602be9d0b3fe467bca6cd969a9ce159190c5fc96ad9c7d11e79a587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective-emerald-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32965feb009cd5ebdfd7f5086ca5b7f28a550910e38ebbdd193432b7cdb6866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic-apricot-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6d703f2906748a756406726d5703b3c19c4bc00dcc725d07b51dbd7b9990d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional-scarlet-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67be183664de7984f6da22a61a60dec3c2b55b790c6c2ac735fdbdadb56dda56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired-tan-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d044ba7f9699317d8ed43952f2afb41ad002551fa0a9529fd4a9d8bb3e24a322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal-emerald-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989c426157388d414bcb8531979c6f2189a027119c6c3179c58e297c1cdc2168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious-black-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6775f2f96fd0cdb9c76488da3896123cf7466e8d7399577ba71cd9b23b624b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68292 Malicious code in federal-fuchsia-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106e54722cb4014e4f59cf894ae992390cabe5dc238c395dec68e72385f4e942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...