MAL-2025-70171 Malicious code in random-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbb9f2154552be5a8f0ab6a2b2aaa847bd80bdfebe603c986f444e4835b0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70048 Malicious code in progressive-black-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe39284710694ec5c5188692566b906383dbb5451c29c6aa18f90623a7e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71491 Malicious code in vocal-salmon-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1aa7b31aaa4464bbe726a0a86fd352e0763754c5fc3a7cb2483d5c386f1434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67598 Malicious code in cute-black-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b718e4d70fa3c742521180ff8a6559d427876af5ff396c240ac4752f06fc5084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69043 Malicious code in key-bronze-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918362f96b1d4bd3f7de44ad53beb5f397524b25a8ca7603534e6e705049763f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69822 Malicious code in partial-rose-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27d0c49db0a7cdcb061529dfb3162ea69b486e060988006b840dff8ff846e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69790 Malicious code in overall-beige-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac239d2e3e63479217ddfbf43f4552ee2db2f428e7e7805053325df7d892a252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spontaneous-turquoise-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58fbe400b732df3821bcf5498fa34414d61ab99643c31edf23f23632da8ec6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-white-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9205c506b06060d964a390a54f5c37a98c42e81697f27ccae973a907fb2ed40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empirical-aqua-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d5b932bf56517d8470b61ad758e1ae23963b8b991da6ba1ee4283e0be9ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69741 Malicious code in oral-violet-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7702b9c890b216faee7ded7a3a49c4435b00264865d5a045cf206468c57b11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68685 Malicious code in historical-aqua-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c12aa59ed503981f956a6706c77f472f9fe28374e7bf39a7234a4ba5c745d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70646 Malicious code in skilled-salmon-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efed3ef41e7368cd9be586b6547edc9e2eb60c829a38c47c6e083f9d42105f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69034 Malicious code in keanasti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d640ce8dfbb5452b0680f769221796872d66e6fa0516af040cde2d3e4fbc9b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69612 Malicious code in new-crimson-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e44713ae9028c1c614bc0be670a9821af15234eb187046dde60d420deca9a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous-coffee-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff67102627342380cc50b670a8b1ed5de2c476d25ecb6f45793e846916e64ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee-blush-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d02ddb491cd6227f823aa96f2b86b82493cb76443e3d3d16642e3d676b28e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative-silver-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458bd1e9bd80748871df565709d15bbc7067bd00aa949e954887475e903cb0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798896058e89d22426398615be741c85c7cd6c1a46b3535a8b5e54cba8b894c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...