MAL-2025-70349 Malicious code in residential-emerald-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f7b4a24edc164d1781bacad5fbaf36677af93e046b468a5b65adf44f4df87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right-black-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d93e95d5bfe44016dcb7d0608937ab66981ccc2aef52487d0696950ff1da99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67713 Malicious code in democratic-yellow-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c005a5943e6ff1eadccad65fcdf5aa480d1aa4af5d48890a19f3221f6649f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69278 Malicious code in mammoth-amethyst-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c989dd97ef251fea7eca1383f63a26654f75e3bc99d44ac1fe4e59551580ec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70016 Malicious code in prior-aqua-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4193df28f5a164b15ab0fd858e2b01eb05713cea5a4d632b24f70179d65b495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70631 Malicious code in similar-white-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206529509c3f6e07edd868395ce1bd615fc2b1853d189fded8b7fb940f1db7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69540f883e4a49517c909adbe76e962368b99feefc624758cc456f440bfe3097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-bronze-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387c6bbcec344d246523eb5045a18982753d70cfdf226e3968e099dd54f66383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational-coffee-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67ac3c0e56dcb91798049a350fce5eebe71a00c3d3908094079d9cfe2c8724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative-coral-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b263a9b4ed0aea9432186687952c453f86cf5c615bb120a6eebaeead0232ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striped-scarlet-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a787a63e76d246ed55b83dfaad2a5916c6d804d0c6184ecabe449d0de19425f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd3b5ebeeb8c62f78a0ddc7b4e5a3a328c3d188ec0b1c35af5fd387e7764eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68023 Malicious code in enchanting-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc242006bfa1a3ac7d627d4dcb95de5fe968643e8119d6b6fffe4746e5d4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive-amaranth-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9293092e5301404d2f71af5e25b1ad94d9c20f605d37a63ad0070d98d0003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68969 Malicious code in international-silver-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd92b399824949e720cb1655d6867d711999b0596f4ec133b7d194568b7c5d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66872 Malicious code in attractive-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d342ed90ef9ec6b3167c1f6c6cc32a1afcb6922b8023cceadb2c8ed64c05c7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68820 Malicious code in improved-red-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5150513588b3d38b2ffd135f84493cb45d600e4449e1f308d36a997fdab58dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71489 Malicious code in vocal-coffee-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3b53100e68addd2ad29b62ffc17e9659e8be96020478252a6d2a50e929af94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69986 Malicious code in present-plum-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8310bdcca0adb4fc4040db88c2109b3c294030599b7a9bf1e36f16c5d7cb825b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...