MAL-2025-70336 Malicious code in required-chocolate-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11de199fb725cfa12229b8e24315bb84035439be1e175af2bc9f5c121d56415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68001 Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66829 Malicious code in architectural-azure-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644620179427f6e90263a2471637e4b6a7083aa48f9c59f331ff36b98d89c721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68570 Malicious code in gradual-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7b2c358827b2647194b818da4cb5057ba0e627fa4de35dbff40708304de070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal-purple-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41222bc95d1cf0306fd2f0e299e49fee97113f79f4541bc3a3a48b4e40865301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact-bronze-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d01b36cc348aed9f6840d6e29fe3b70c038d1c12212d85c02be8bd1c29c1e71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily-turquoise-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a89f7bb083589d66e915fb0656d554e943e56a512dfa8eb063b65eebcff3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift-fuchsia-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed912f64783582852c6c3adce0c52bd1f36dd0864bf1745217ff1af0f11a8ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-blush-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfafdcdae623f18113d0447e7551715856da0c995d924cc866f4a1d344ba6fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar-olive-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e505b05a1e202f10660f04449288544378bb565b3771b5da794e0e7413ea5000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral-emerald-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61b63da53d122b35560a03f07309d8fb162301358ebeebd46cd38e0378f46fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-copper-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c4b63883ccb709694df00325e9d5182362c77e2eca8efbc0dd2ddc84e32ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute-green-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c372766d52d748c66e571b7225cf77172d1fcd0531308b79c3483962e6ef51a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67266 Malicious code in cold-gray-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf6bc9f467d8e18546c052d5389f1f4a622341448db555a0289553ccd2c2613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68937 Malicious code in intelligent-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba4a606c0f32c6e749a5aec45d3c35a1c2ca8bd2384ebfdba07bd4adb477b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67006 Malicious code in bloody-violet-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d15c935582d5f27b0517c91667600daa85c9e73f6e4c3e7e94e8416034feab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69875 Malicious code in persistent-white-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9443d1136148155802d5fcdad0fac7678a03c4cca7c360900cd41737b7416bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70955 Malicious code in super-peach-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9459407e4c096c765f48c9b702a6743072979bd911f20c1539d31fa21ada4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66719 Malicious code in alert-gray-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a256918cb2181a2827aa7100afb8b91e32727fae19bdfb877eaedd8d87b8eaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant-ivory-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03a2de8ed1f556ccee4cb08c59b68d0fb6eb1c62b52c82d394f4aa27b911a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...