MAL-2025-69070 Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69694 Malicious code in occupational-yellow-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d335c92c424c0fb20d0ab19aa67affa008f724f8165dd957ede9dd6a3c1b2dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67901 Malicious code in dusty-jade-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4c9b64f2d6f49f51711bb433ada582350b0a007a8065b7183950e9df8a4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71126 Malicious code in thoughtful-tan-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d48aa5f2349e5d49b7517e083881afe0fc6bc065b662604c3df8d828396033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68217 Malicious code in fair-salmon-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e78ace9d2352a0da514059741015645ff8966e951eaaafc211b39a6132dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71217 Malicious code in unable-blue-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93b88bcc31105dc32dbd8f4be13af386c6af50d7872ae0d50f01334f3378964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71359 Malicious code in urban-amethyst-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9c293793b422fe36c0be94cc958a24b61003ec5768b3ea694b70238404b1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional-scarlet-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67be183664de7984f6da22a61a60dec3c2b55b790c6c2ac735fdbdadb56dda56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill-moccasin-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a20d2ebc6bbb64f53e71ca304303c9c91c883f5cf9a23dcc241660b29cc2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless-purple-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821a55c7da4d01c23cd7d6433604b7609fcb95183146bb7436d369528e09e276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-orange-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f63cf317e9402f9f79b0bd5f8914cebd2686edb06015897fd5dd32241b52d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing-aqua-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d938324acedd4726c66308424ba3ad390f1c4cf8213effaeebeb9722e76b284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny-red-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b027fd39b632cb7864ad150e7b65562e7fdcb3dfd5877181cef17890a90c367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial-jade-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a9cbbb64438caa2f6d0e9f19e76e5983ca2024e067c77ab28d097f34c49256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zippy-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f49df373804ce5cde11a9f55152172a754a2ba9699e60c11ef3152c4a63292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68930 Malicious code in integrated-aquamarine-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5913c29cf2e31231c14d0b0c91ab4ad4b29f4780155fe5ba3e21d1b69e56f5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66806 Malicious code in apparent-brown-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92dbd6087014491104112cf573b4194681ad6f5012eae47f1d3179a460191ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71081 Malicious code in terrible-maroon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697a9dacf55ba165e543ce6cd1a701e998c30a7c159f329cd8d94b16ff0befbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68632 Malicious code in handicapped-red-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9bdbed9409406e836292d37c0de6c2c308677834a5c87ed0f5fde6328c552f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...