MAL-2025-66725 Malicious code in alive-harlequin-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f69e53c7dd84c99ab8c1994c0c6f5b75352b49fa75c583294a1353cea1d8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67431 Malicious code in consistent-black-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598af1f052e46466388dbe7e2cd5881929a9758aad874ac032f2c30f3b7521d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66715 Malicious code in agricultural-black-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71122f2472a41a2e23826ac83bd59f536a662514a98797eec62aebcf4773c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70900 Malicious code in stupid-white-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30764cbebfbf7e15b8de31dc3afc3171da4ae1d9e3288c4d0e52b2bc79a220c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71051 Malicious code in tasty-moccasin-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8124192d4df1385de1426d5f0da4f32a98757194ab4c2953dee00101dfebd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71305 Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69242 Malicious code in mackleafdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9463068afe7a7f31af3ffb0f214ac011287dd8a132fa74a64b204eefed6f1426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68446 Malicious code in frozen-white-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842731e4a5d31da9b582784aff179c2da71becbd8d9924ca85d16c2c2ff59a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71246 Malicious code in unconscious-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d420ab563d2cae056e32cbff56b7003246fd8131451a8c48ae50db4af0ec9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70366 Malicious code in resulting-copper-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36175b16f341ad83d6506d14fe384d74ed5c1864ebfd4d7761b72c1c3493792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous-salmon-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d367a7652de0497384529f73d29ebc0c9a72e11de0d4b99b21ea3cd0204ced4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious-olive-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be70bc84058613d237921c84661ff03ad21b6dd47293c73d27efa6e1840ef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-black-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3476ed856e550997e83958ce62d48f1ad159294a349c30473a2deb117168d114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left-fuchsia-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7b30d014a7c2e963db945c363a0b87b7f0b8f25a8231df93a029602bd76734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-bronze-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bb2b9d5bc275f2075b844ca5ad10998eaac7135026621e3d3b63f521a9be0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful-aquamarine-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60cfc7cb0001d675984f0440aab1a70b3219b828efa85832dc98e1f3613d9846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...