MAL-2025-69977 Malicious code in pregnant-indigo-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800806d4954db903c9e6038e5dae65c7b70d26c036744360a4207986078dd317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71472 Malicious code in visual-salmon-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83e18fe4ffa1fecdefc914db542028400a36be1ac3ac3a4a8e1026a552ccd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69739 Malicious code in oral-pink-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb645def62edb4bee8723d3d08a9108dc9c12888d6c28e11632855c35b2d21fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68654 Malicious code in healthy-tan-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa311d53a401f8027d4e7651de65399fc740db97240403e75f909d7884e4c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68127 Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68850 Malicious code in increasing-cyan-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a68ae0fc844cc3bcdf86a7972e5a30f74beb46f9dbd9bf05e84124af3c48a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68316 Malicious code in fierce-purple-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e5cc50256b998c149693e2bd90761f604b6be555fe4d976e50edf52cd2e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-green-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c628f0dd3c06d481f70ad0d075c7b928910b99016719bc7109752d6b5952e539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-tomato-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da025e7ab2a6d12f0b2538355a04d071c822c9e2daf4448bcf7ab4d899112759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough-lavender-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3f83ccf9c7089557e3d5063f3e7bf330cf5f2ad24fe0a7cf5d59d851dff39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy-ivory-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca8d544cdc5c609bc9519e67b075c912a0541daa461147f06e495a28fc3a4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic-amethyst-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1da37c0a32fc9adc48cf718ef1ac4496203c3d3c3c8e0c958f16f18dbce8d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative-silver-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458bd1e9bd80748871df565709d15bbc7067bd00aa949e954887475e903cb0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful-gold-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c1490c179356d8f1ee83ab71102dea0e36e7478eb9bf5a6b7a8370e1431ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie-apricot-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47a5f484587a2ac300123d920987c4ffc7b0eebbe4a94bb919d609f79c39eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-green-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f6663eed48aaf1cec5b68318e6f1146acf067c78445ce5c37ed607bfc11ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-harlequin-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ede8cc2d5f23e6c27a45b1edab719b3b29678075f8e8aef92f014d7be6294af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-amethyst-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4e208b0b8efd7073a4b1b8d378e77f4572925287b7df4f541215c6e067dd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...