MAL-2025-67735 Malicious code in desperate-blush-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62092cde52d6034b8851dc11976ca9afe23683c56a45a346dc5a41eb0f864c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71317 Malicious code in unknown-chocolate-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb54bf6dbeaa93dd04abf3f30e30c145bda62f4256c2dc00909d762468385812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69822 Malicious code in partial-rose-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27d0c49db0a7cdcb061529dfb3162ea69b486e060988006b840dff8ff846e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70785 Malicious code in spontaneous-amber-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf092a425f6449b7028bf1ce4c40881a76dbc8619ceec2d13a602a645780df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66683 Malicious code in aesthetic-apricot-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b65f28f6b725939bd0f6ea6d4b1a80f59a9dd30dce2dfb74e6e599f74baa6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69480 Malicious code in moonmooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a07e15a119c31a9846d824ffe4ad9d996e2b78aaad96a1fee8e0afc4fb557f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68654 Malicious code in healthy-tan-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa311d53a401f8027d4e7651de65399fc740db97240403e75f909d7884e4c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous-coffee-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff67102627342380cc50b670a8b1ed5de2c476d25ecb6f45793e846916e64ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798896058e89d22426398615be741c85c7cd6c1a46b3535a8b5e54cba8b894c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial-blue-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3a8ccdb67e777f18827aa626c829b6865f2d47fd4a75badef5eec12a070de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist-sapphire-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41d172ff48b50a0431c37a1a339e1ef59208943f1b42442886c3e9db564cea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary-rose-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941da22e570bb4ece2c41326970134a0091f10af69c955913f6d2cd04696cc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b93ffe38e8c221307f7d85dc8da59a42246bb16054d6c6ab517b1549ae3695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-fuchsia-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be00cab3bb89018b651ab94919428f46b5fab53fb33ec5b28ae195fab5684c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied-red-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75cb27e4393b6d32b1dae2a5b63ca40e777ffe92cff841cd7cb3fdbe1dbbda4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee-blush-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d02ddb491cd6227f823aa96f2b86b82493cb76443e3d3d16642e3d676b28e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-white-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9205c506b06060d964a390a54f5c37a98c42e81697f27ccae973a907fb2ed40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empirical-aqua-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d5b932bf56517d8470b61ad758e1ae23963b8b991da6ba1ee4283e0be9ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...