MAL-2025-71408 Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67206 Malicious code in civilian-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0902ce3981d4280a57000cf5222fbf3cb73197d87c3221baed691af0ccc3cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative-blue-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2159e27af3e49e0a543606bc3bc0c88b549fbae9734d73af7a2de53cf1a8e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70050 Malicious code in progressive-emerald-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb88ae567f1f5b1d4d743205b503cff50b329402341a61b62c76ede00b85d370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57fe39cd16157d858394cbdcc95cd84c1b86b199dcdce7a2fa75c38c28906e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest-peach-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4394323375238f4ed22654659efc38396d1f9a6d637783288429de549a30775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70231 Malicious code in reasonable-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d90cb2a35042d6b9b56ea2bd88e112a31cb6d6f85e6108dc7258b207ac0314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy-copper-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a27bda73ac41d9a5a074a7eaecda04fa99e348444c37daf1862818d1fe4364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint-yellow-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7692dbbcdd17d56fb3a61b7f1c7f9101f88b25b401a2366ac03ab1d68c768bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-rose-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535e672a5d3d6bc55ef30180d557e86c8185496333311af3cfb4d3a74715d9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-coral-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413a9d2909401f377612ae1ecae91c71cfe0073f26b8794dcaf708331e021b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70701 Malicious code in social-red-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc441864099719c1b972e7e1c5054dd2a02c9dcd24fd1541d91741cf907efc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69031 Malicious code in kanborasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f47bee1abbbaccaf40bc4a1f476f9631d2c350b759c831ed202be0f6857557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-blush-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f1e6c77bdd9c139f83ac5d52e3941c698b140522269dd82bcc2fd446f8a7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual-sapphire-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145890cee1c2fa10a6220a4248f04920d81665c41131c90393d46ddf81adec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67612 Malicious code in dakruz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca211a3287b5cd835f3a7357bdc91092dc80d87a90bb22f7b6eb6feeb08d96b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69408 Malicious code in ministerial-orange-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3a8efb19c5c76f8a5aa0fd91d7d80e7c45b4d3e7ac93106b607801efc4154f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70433 Malicious code in rubber-tan-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08274620856864348e23d6716e3501a13040b0899523166b3dfe537f60e7dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...