MAL-2025-71480 Malicious code in vivacious-harlequin-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831b5de2e9e7abc01224fd588df7e23941dc986f7e24a44b16493dd7306f29a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70013 Malicious code in printed-blush-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7463798ff2ebbe78a9c550c3ca02da1ffbd6c156873a07d35247d2b02b79e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71784 Malicious code in zippy-green-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3e020b7eae784c2807e8f9a4f563cbac998c5878f005132b89ed043b28aac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70304 Malicious code in religious-peach-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a863d64df8d0c272022bb571e9bd31a743b5fcf74742af9f0986a977b1a72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68719 Malicious code in hostile-ivory-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98ce5d8084d21e1d346f583d2982c62f529ff690aad20b0336abf40558e00a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal-amethyst-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fd7d22fd794d7da9546a8ffb3d4e6f09a6a7862e5fa65d409a937f456704ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prime-lavender-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdb354f51c52e4b99163fcafa7d5c8a069bf2fe8673793919cd01dcfb2c3942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-maroon-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a74b16c48751dd91ee315fc8ba82366284a4a454ff04e12837ce63102b2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent-lime-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14149eba2f834277483a3aa4250b95a72e8cfbbe0302149b3457114ee893e7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in realistic-silver-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100cf7b9bc55fd8a9fef614f27683e84dc6fb000dd62834c35627b4013293d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advanced-maroon-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052181f54410a282e0f0e915dd307cdb2b3b6e68d1b275de02ae3c00e86ae812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-apricot-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4851cb4965e37b2bd83109df63ea6eda692fc76d3c3bb89b9df1cf3986208728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired-tan-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d044ba7f9699317d8ed43952f2afb41ad002551fa0a9529fd4a9d8bb3e24a322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant-lavender-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d61ab6e2e6315ea624ace1a8228ae93e4e1a6da1bdfb6004ec0f547d8361231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong-tomato-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595c945bf8dd5957883008b286cfabe244fbbfd9474f87330555a6e021d0bc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand-violet-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2acb8108780ad6fcb19d3dc4ed8fb862b7f4a5e9d3943b0fb5de2cea99748b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-azure-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1554280d5d97309dc985f61e65d2780a1122980cdffa9fd61ede75c148a047f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65480e409db966d159ab97c3ed2bddde8af21509ac9938ef5431690db97bf69a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...