MAL-2025-71283 Malicious code in unfortunate-scarlet-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f20596d45414ef48f948e1302eb75f642b51e1c0edbd4ec0e26791d0917345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68289 Malicious code in favourite-lavender-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4e0bd4971c756f997d18beb8fd7c646fb86168118c96bd05193d16ef70524a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68773 Malicious code in ideological-scarlet-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6370338c97a99e7f714140199817ed60f30bbbe5b246c01f69085eddfa152ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67871 Malicious code in driving-gray-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb8f3e9dde279ed1814194c255e502c0c544950650136e069b73057febd217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69265 Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69831 Malicious code in passing-green-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32323f693e5c1519bbb8ce90485331b0b9312988582fec4074bfd85da592108a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69572 Malicious code in near-crimson-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f6d46d1b3918c3d65c5928e453bf72f4bd82a9a4da7c3fe60beea8466d0c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69236 Malicious code in lucky-black-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532570fb0d23cea508a45df7704433797f39fac8ea624d4215b54c66e40bc02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70864 Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68085 Malicious code in estimated-blue-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0b3c23cafeff4c83e12d1c0ec9e4204a13579f4629829b1f33bfadb1138c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67293 Malicious code in colossal-ivory-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fae44db78e390ad7267012097440e4f536fa960da2ed175d1459a123a405eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71039 Malicious code in tame-gold-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7818728b6f6001557cff28680820192fecd32ed7bf834ceb5eaaab0f3d3473f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-gold-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2218784cc7075d10081552114bfaff01ecb4722a47dd8182d4e4b8152fbd6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-gold-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2205c93dfe74e7ea41cbe47475ffcc62cf7d136ed2bdbac95da671dce46af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved-silver-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb7d25c83bbb5d894eb3f9dd79fe70788df80630831eb1d605f7c7dbebabffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-azure-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5770ca3e2f6346ea16e82c0218a69932c3fe4d26a7e8597e9f29af33d373e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw-magenta-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96621f3a37f13dc272f66d1c1fe710481b492d801dca21b5dce842f5f712f74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad-fuchsia-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807679db298f387cf489cf9dcea6db3d6142d87d356389a29622e7ca9775212a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly-orange-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f62b7083ebebf20a9d2f2fa5551b50093bfabe75b3cc25775db1f7eb13eb224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...