MAL-2025-69950 Malicious code in powerful-tan-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50120a95afbd3d8b9c4b2fa1ffbbd580c00dee50bc4f27510986adfeffd6c08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparable-tan-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4241a4fe88b63b681d8b8605692ccf2a8f5e2142c813b6e1b2105d98f51aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69314 Malicious code in marvellous-blue-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0689dfbf8f9fab7e7d3efda817e3ab3c6e899b9630bfc64e57b39318404c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69856 Malicious code in peculiar-amber-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa0c652dd015072847a6a59bc198a8aab719d51a8020d8a47eabfcd416dc155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69608 Malicious code in neutral-copper-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae984325af59cf81691c20859921d7e6afa13dd79c73f625647d9458672db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70121 Malicious code in quaint-ivory-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c857ff513286c048d80601e29edc3eae027494466bbac98536c4853f4d21ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66748 Malicious code in alone-magenta-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e549a2ae01e474f810f14eb4afb0b1bd12c73e97b3ead5e17e6a9001ed5ca45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70409 Malicious code in robust-tomato-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5c2a0406505da20a9080fc73ba27400f717bdbe2f01d702fa768a7271f02a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69810 Malicious code in parallel-aqua-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b184a1dfc0ecdc9b9be15d653fb01c19d028491eccfdbf18edfbe4f1ad3ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70953 Malicious code in sunny-peach-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e4a62860b53b5aeb24a37a32f77bf6631e9245b46c8f3d5524f3e7d1d5e15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70235 Malicious code in recent-scarlet-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025654e8799a1bbec9d79b28d17bc415e66ef5bf97916d233b2fcf5e374c9583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile-fuchsia-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c1a7b334db7042c929caeec9728b7e850f8f04ad8ce88750f90a9985d33207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69091 Malicious code in legal-amaranth-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807c3d4f6c6336eb04d9103aa21dfbd51de91ed269d65c36db373648109fc66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70646 Malicious code in skilled-salmon-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efed3ef41e7368cd9be586b6547edc9e2eb60c829a38c47c6e083f9d42105f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71748 Malicious code in yrinth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916810ec607c2451550d2bf989707b350a214f523dd4b37b8eba7b2762f9543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68012 Malicious code in emotional-azure-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0168d10875cefccbccd6118df609c52d6d2123eec3b09ca30c4a4b725aab4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69034 Malicious code in keanasti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d640ce8dfbb5452b0680f769221796872d66e6fa0516af040cde2d3e4fbc9b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67268 Malicious code in cold-olive-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a56c7d9be074af501d4c88ba87b8495cdbf0cdcf78a2a2d7eb49d6c031cad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66619 Malicious code in accurate-tomato-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e5f7cde60c6f672e410bf6925aaa78c50cc0fc616d037383f5b0fa3446213f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic-purple-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ea83c0225187c3cea1ac173de78668a6a803856c1ced910ad0c44e6b52b133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...