MAL-2025-68007 Malicious code in embarrassed-beige-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb43a5191d8af27f244b1a7a0dec77f265c5cb0371670863d6b8d71823bd7d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70796 Malicious code in spotless-indigo-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b1017b8efb49df9a8fd6489cb4a37cc8b15873a3b936cd93bc4efbdea7b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68907 Malicious code in innovative-indigo-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7549d6f57be0f96e1987528f20a5124998f4a4653f8bbbe946ed284d22be4a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy-magenta-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba193a368057a545eb832f707d6ac91355d50f84b8ef33bfb83c27f5881bab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-yellow-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfb159ab792c2e0a585ba737c2d600c55893c30bee24fe755c371ae55b828a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main-coffee-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399e9569f57d1f6e9b8028b704c023bbfb0e549753b5c63a174fcb1b87e849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-jade-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414886d8f2d9e4a3c107c7603642138a6dd93e6cc3641619d681d25197a97b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated-aquamarine-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5913c29cf2e31231c14d0b0c91ab4ad4b29f4780155fe5ba3e21d1b69e56f5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f88a81de5855bc0d779515f519c145904c8b959b10b4326141b01eaf1805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy-chocolate-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7d68dcbe7aa9c9413536ba4db6b4d277c3f12308374cfcbdbc31d0fe561e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71117 Malicious code in thornypric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971747ff4396df72c7620410bfc1f52e5b8c7bc382d9f284560d4756bb6e8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68011 Malicious code in embarrassed-yellow-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ff0fa496bf27bc99cfec9ea3aa1c8b49f3f56eccbdf553f56c7856ee5a7602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70742 Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67275 Malicious code in colonial-amethyst-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3b9a92f1e02ba419ae9ac52036bd8a6cfc5c739f96f22edf0f5eb1564b820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygotic-white-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19af5c7eaf2e7c3b3d0b52dea964492775dfb5c15f7bec6134e217699c30ca5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68893 Malicious code in initial-beige-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58044d381c1d0493d05ed67b8f291bd04bd3373df00463459d6a6678e1802a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67367 Malicious code in complete-tomato-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752c4fa05593f3dda52a5d8b2bc3ab74cd1b2e288f2a4801426c069eab1ae139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71018 Malicious code in symbolic-apricot-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c78f08ccb9e0fc0cfff8c2e0e45aec8298abdf42c1e9e605aad30f99ad9270a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67635 Malicious code in deafening-peach-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1c02855daf0fabcc7f51e418dae1d10126ea0f769b3687dabaa3dce9376c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71577 Malicious code in widespread-black-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b386f3cbb2457e9189caf4c3dcca6061f858030939b2287835ff9bcc31ff6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...