MAL-2025-70908 Malicious code in subjective-turquoise-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09af885d3bffbf8778bc41d2e38b029a37c62295ef69c07b3fb4bbd10806dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67648 Malicious code in decent-teal-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f747d39c6eed2c1f0f58ea7687ff17114f73a16b1b4b16bbc8e11dc51a3e8503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67625 Malicious code in dark-white-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c30acaccf558a368a74d8bdc56a6db049738d14ac573d6ece785be774e0936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67879 Malicious code in dry-blush-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281a22366216d332741092eaacb47f80447745047113728180858f304ba9372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71251 Malicious code in underground-ivory-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea78fcd78bd48e1e9b012b01ea5e6c513aed46356748bc262e81e56473bb0534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70301 Malicious code in religious-blue-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97d6af21988e019151eccdd0dcd3fc90c643671a1c9978d228e5bd48d23f3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71436 Malicious code in very-gold-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fd09fc637b8c273531f83e803dcc9d2c3c36319cebca2920f30d5dd6043310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70342 Malicious code in resident-aquamarine-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c990d9fb26b1d85f36c3951b427ea6ff2b8cf570a31326196291a2761ea98cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71107 Malicious code in thin-amber-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0833edff1dc7b446c54e45b19063371e621d8382d3f166333b43a22fe5ed20db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66913 Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67922 Malicious code in early-salmon-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713813cd0ecb1bd411ab7d6f955d815f14bcf427cef022fe2986bf148a129ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist-tomato-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29a56b90de9201432562ccf576df4d0e8613cc9eac00f9b8b0b1155282dd591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-aquamarine-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be00cfffd410ba5bfab5729715196c9bd0546a6ad1a950d88704203fdcfe9475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-brown-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdb4bd13f546b1d20d5210cb4d24f34348f24f433288c54f6dd47733fc681fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-amaranth-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060176a865bb93fd400ef52c09f68a0c90e1c96e596771fec5716228e874e5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7544ec1cadddaf841dfa15e92e54adea6aa8cb3dd8242d0bac825e2e2a4772b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange-blush-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b1147e1dbe42e9219f9faa55cea8fb805b76fa0374f263a0fc42610ca5c249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated-aquamarine-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5913c29cf2e31231c14d0b0c91ab4ad4b29f4780155fe5ba3e21d1b69e56f5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight-apricot-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1687ea28057362e40ca009ef85fe43ca9a65a3db6f69d5e9214292a17b376b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial-orange-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e679c1243b387847e8b9dab20ef639d8415ac0d7f58b8b2711ab4ef09f049a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...