MAL-2025-70463 Malicious code in satisfactory-scarlet-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfadf2cfc2445e713d1794cdb1c4fd9f7a71717e2ca7d499804e98924b25c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69669 Malicious code in objective-coffee-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723a2100c4ffee881ca605634382d1561b909db72ce4f270fbc4c1c6b98dd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71082 Malicious code in terrible-scarlet-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf022aa89df38edd5da11dde4d7537a96d77f211ab7223241223ea811fe19b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70335 Malicious code in required-azure-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5770ca3e2f6346ea16e82c0218a69932c3fe4d26a7e8597e9f29af33d373e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66934 Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68624 Malicious code in handicapped-amber-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74275bb43e600994eba90a00faacd7ece9a298979a3fbd3d186de95ac52e9b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69882 Malicious code in petite-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f933137ab6d7196f261659bdfd0cf3c4641d58e8d9faec7f895d77db332c74af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70407 Malicious code in roasted-tomato-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e177509a34221db84e2de957e265c63eecdf467fbd4afefea2d4ad30bf2659af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68277 Malicious code in fatal-violet-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3677b124232bf15dbc7a95bc282b3ac80574b61621475bc0e76001d64550bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70850 Malicious code in still-emerald-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b42b0a42a07cc08d54a634d714c74665ff888711343966ebc407bbb30d1edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-scarlet-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48cddcc5d57cb1ed4247d4d5510ade9f51b5d4a66ecb4402c22744991dbb481d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative-aqua-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6756cbcc02a80e8a9b30116f25dd346784ea932efce612d90d2d9856b6d50ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-ivory-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d6707c122ad21bfe8a77590278fed7483dedf9a77567eb7555ae2536fe4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged-brown-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbac7f7795efef2ab473c85bdcad7a99b03433f965c6f75e8a9c1baefad7bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-harlequin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416705276e35227a7d9261c4d6597c3de24f921fb490a0c9db23ca31959cd50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable-copper-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c4d488e2b83fb64622a88c2da565b42248b1bac346d25ffe38e09394213200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-turquoise-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ee152906583f5c46877e21118ab2a3a0dbe1bcaf7166ffde17eafe64ccbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-harlequin-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36f45ae10da48331ac0f9b4c05293d2cac5959c595c4fe7e469402741c8029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable-amber-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07d8387f77dcdcc6e6bc9586eb3434fa69ca5fa6f36b17c897361e31c7e9235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...