MAL-2025-71437 Malicious code in very-indigo-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff22bb932266d634fb2fe73a2044d7fbd1f090c534653fcd23b59035e776fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68651 Malicious code in healthy-green-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aedb54aa9a207c828c0b6c0fab42fe4f64b16b8e27d12ee887d74d70acecdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66976 Malicious code in bitter-apricot-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38874b1117a1b7bac191dd5f956e349f10f29dad68873cce1ad6ecfb9b476200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70528 Malicious code in senior-ivory-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850e6b550c305f9426a99b785d64b63ce7f5b7797c9191181d641ccb7b585723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69813 Malicious code in parallel-tomato-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dee76d153cdb3635360c8258f7e0d2fd0c3147fdaaa8b9d36ab7799d18169cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68431 Malicious code in fresh-copper-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b619341e5dc5be2885300fd576f35bedc8034d74eaa45f36efdbc33b61c2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68066 Malicious code in equal-black-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf678681807bc4adddb7a719ec54efd09f8b094cf8c1b9a401291e73ddef40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66913 Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual-jade-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76dab5d13f3426b441d8e02c6d93f5dc9a472695a87ade9338bc6e77149d65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40476612ad0eb2558d83062c4243dfedd71ae383b311f90f599bf2cfb552f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated-copper-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e090fced1bc3b2148f98e8582bae050046128dd03886782a78e9bc7c74ecaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d28f3d0ea6ddb83be6c365b61ccc3886dbd438cdcc47f3c448b5058a2a9ab00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae4daa038f351673b5b76520af182653ceb094019af2896d7358fd6df1d793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed-turquoise-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68508e16004b4804b6330aff20ca031404434bc9b0893a2aa72d53d85826535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced-orange-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e6003c0888bcd4e1788f38b5c97de46fd66846046e2b0b91130ce9f8e3e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty-moccasin-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8124192d4df1385de1426d5f0da4f32a98757194ab4c2953dee00101dfebd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c86d9dbeb4f70c0668bf3a688d2a42bbb5e4f0f9169fd9861a243c77c4b12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68226 Malicious code in familiar-copper-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29ae3b613c82e312d950614229f34aaf4e441a8a760d1869b5167e1c2767722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71059 Malicious code in technical-silver-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02d4bde4bce8d10237bd3c6e1c07f575463ad9e3e76d2c475daa33451864730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...