MAL-2025-70416 Malicious code in romantic-tomato-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2214fae7f6450a1f8a67b318e8e9fab1f9a89d1cf53986aea2e722fbc934d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67778 Malicious code in disabled-turquoise-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a90d82785b37ced475fc35674da0db93c5c0600d678cd678de4d3abe53e0b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67865 Malicious code in dreadful-olive-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9478b181b0a9b1ec327284278a64eda92e8b62d1f067c1dc8718d654aa004c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70643 Malicious code in skibidipap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fe20def72a331ee3bfbdeace05a5624841c9a2e653b236ba15f6e5812e887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70386 Malicious code in right-azure-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be072e2cbe29f81058ff0769be1d5e4efdd9e1bbc5f040e5c8528b9fac375bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68289 Malicious code in favourite-lavender-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4e0bd4971c756f997d18beb8fd7c646fb86168118c96bd05193d16ef70524a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66887 Malicious code in available-chocolate-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea7eb8d7f49b49709a8f8b1ce23027d86e47a00efc4107db02c8fbc24f35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66794 Malicious code in anonymous-coffee-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff67102627342380cc50b670a8b1ed5de2c476d25ecb6f45793e846916e64ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated-plum-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4cc5602110887b833f734dec3a67c46678a8a982b0e607e4434b2d330c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind-red-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c52e2448d9953490fc66339c18c799fddd447e39bf4db3f03612d483fc16d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden-black-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a31d7782549b1eefd936044d98c8c39186242defa6fecf574c2f40aababadd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven-bronze-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef5a0689fd0a2c2e32460c2fe9f33a10ebeaf37814c3af9f4998c31c1ac6ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless-ivory-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c076ce1f3ed7ab09274e3630928c51d4cf51ac9c1f23a6f73e5a8e95408601a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-silver-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc77ca8a118fbec40600961002428c803c6f635da56982b445c71a91f1a11bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic-purple-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d9cb1c80409ece0c1d403cc232d8aa2914f4434243f3204ace25798701b4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-ivory-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d3a96c0f8e2bf9a3c032b2644c04aa55e31ac0438a42419aef0370e4c5246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy-sapphire-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e6cb9fe14643d77e337ab99099fc51fbfa24e704234e3672325c14a0972e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint-orange-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e5767635edaffab28783012fb6a59437590bed7753ade9ef21f34f7739b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dbe179b2e68e2538332172aa823d6f5881c05992b72625f43b5269ed12cf42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...