MAL-2025-70493 Malicious code in secondary-gray-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4e07a806ed55cb2cd0ff4717b81386228941b7c5b5eb52320846e95e94c82c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71094 Malicious code in theoretical-harlequin-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7267d56c1681ee0cfe7b6a91f86775ea9dc533741e850810bbf1dd6125c3631a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69368 Malicious code in mere-bronze-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34078cf04f260967ee575c10c6e6f5f22ede486cd05a76763f97c9789bc9854e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67457 Malicious code in continuing-silver-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dac10ddfc4469b79f52e0163ca5abd6b3ce1e51fdacf5cd9f3f7064b48df42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70380 Malicious code in ridiculous-peach-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ace3721eb5312d70d6f43fe28b6d522d40b52502d4476c6da3e66fee9b957c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66562 Malicious code in @bipyruss/luminouslab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18a63a96569554dd1d59d538be2efef522ceac3c83f85bbf79a6befb6d16169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69028 Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71331 Malicious code in unpleasant-copper-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9916689ee0b29f725d33f82baadb51df595348753d2cc42ad1ea837ca71519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mild-lime-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ecb0f1d85049faed3331514d39c1660a56d2f03feb1f2e4099457d65b9bf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-teal-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ae99188d46b6090de03999f875965202241f16be8c51437e771e03168fb042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated-ivory-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c9ca5f56f46c716f1ca32cfdfa56b8def0bbf8fc20569ab2a1175dae574dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left-fuchsia-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7b30d014a7c2e963db945c363a0b87b7f0b8f25a8231df93a029602bd76734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-aqua-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc6e56f206041a3f1c069ee091f812ec14369fea9fec65fceb83cebbcc662d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-jade-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53959d0e802b6d094593217c5913e16889cecd7229ddacc435086f693600b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-green-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abec1994d4c9ca2784f06c5e2a1ecb7aa86d9b0fe476c46f450e452bb582cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid-crimson-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87da9a7f16c79bc4ad163cefc681c9b1c80c43c146ae05ff51f4087ad9a9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded-purple-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3192ab878a28bdbf574eae0e77d9f43f128af8b22676406cd161a55fbc6654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic-emerald-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616a25fe3ffd4792d865382458e3c2ac18517140db400f1d7b119a7e20296182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox-black-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13d274d795d8dae9a245d8ae1033e2fb4b67dd6ec22ba56cec62cd51229e920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic-scarlet-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74b15ad2ec416cd71e77d02094929a9f12b4c3f5043985d4534327b63530dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...