MAL-2025-71284 Malicious code in unfortunate-teal-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a4101863f88c1d410705fba8c309ae55a2c7a6adb280f56caeb101c072072d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68525 Malicious code in given-amaranth-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c2d5761d03950ea05f7c85692de994e4d003d1fd15816f8f63ef94e134c26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69190 Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69839 Malicious code in passive-white-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28d405b44fc0024fda7b317301a2ab8c701e1c511a8fffe13394e0f039a35cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69491 Malicious code in muddy-magenta-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d62ae228ae4a7575e52392f52d4f8deda5a01312a5615c51558c0aced28ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-scarlet-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4080214e6e792c1ffe5c60019c1f3a37f17e56897a051132d6a40b0cb4ce8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex-black-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca9e5db858c1064e6a1d9b2d6e7bbbfb2af406769f92fb9dd372add98e00980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-apricot-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1988c41faf998866faa5bea614364e09fac1bc1ea4196e6abfb676700cdcdd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful-teal-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f5e59f27e3e6268d2e1001bdf3017c3c196cf5eaf367f278ea6dbd5a1223a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid-orange-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4318b5396edf0efe3232597772662834928726d714f4bc279015987863ccf387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-yellow-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b89b61443160c4cc154547db284d2e071836223c8826dfbae83551e2c4f2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-gold-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93186d6beaaedf183c381e086d35a7a979389e9422dc8bf83d60ea79c721f200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme-blush-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683098a728f81d88616d253833518076ca39d2482f84fff32d02f8f677e2eab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-harlequin-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cea9ed72a0e945877f24baaed2ad44e65f6b4d20233354a5cbc890ee1be10a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest-crimson-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5718130d82aea56b8775c13e3bebf47d57dad049a5821b860b8b91928546c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-gold-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8e0b3411496a20e0e97cda6f62fc961a605e143f27b93a489eed38e5fb63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precise-silver-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d42ae136a7c3df3bfb885b292aeba9a87c5cf43e40b8b176bdca6e086e1250e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-magenta-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a14106672af764805df4c0100e2a19dfa8b7b38b2f66cd2c9fcfca1c8350bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-indigo-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428451e10a9335f52c1ae577a1d6edad3f67a01f6a6ce58a49d07d3e0071ad22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...