MAL-2025-70546 Malicious code in severe-lavender-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a28600d212e6aebd7404ed287bf4e9d6b829f9d0806200fa0a347310989478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68506 Malicious code in genetic-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631e2e8ab0e45528fa7a8fcacab0eac1a8d4b787560861ff8e93024076bd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69963 Malicious code in precious-crimson-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ecf1921767e89ded31d99709191b8c6cede4da7611c0c0d65c4cbd102303fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69088 Malicious code in left-fuchsia-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7b30d014a7c2e963db945c363a0b87b7f0b8f25a8231df93a029602bd76734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-black-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015d243eedfcf4e56a928170b32e5515d0a1ddb7225c4578826501129ca59578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68690 Malicious code in holy-harlequin-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036af5bb09173357d055436d457b8b1957e8d700fac2f600d56b49a5c8e6ddb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66913 Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70088 Malicious code in psychiatric-blue-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c0703a818e5da695e0901e3026da9cdaac04dd0ae636e3bcca56dc9d639258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-coffee-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f0acfc6132b8528998fb886d4413ce25343580263ed594e66e9ba714bacd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced-pink-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d659540f7080253831d43d732d9bd864ac2dedda2e2d12148cfeff1053b4f07f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying-amaranth-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf3bf0546bd4920b14909d9a3dc2aed1af5df59def21c73c98dc885bd788f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful-teal-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfbeef353252e003c61fe83f322ecd6a730e17f39a33428d00bdc279dbae0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban-amethyst-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9c293793b422fe36c0be94cc958a24b61003ec5768b3ea694b70238404b1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68572 Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71077 Malicious code in tepsimoba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceed2af4f30ac6875bb80041915462110c44c957d39d85fb9afcd45302e95c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70740 Malicious code in spare-white-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06917ed4c161ff8e5709c9225f92fd1d3837cba7985bc5cc23a274c2a0e6858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70613 Malicious code in sick-yellow-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc33917aaa28ae9034322a9f94e68c8b5fa17ba84578b0099d28982c8dcfac63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69826 Malicious code in particular-aqua-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1803b2a8cadd50c82d1001e1d6229091453a5a29061f1f709509840e982c488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70830 Malicious code in statutory-black-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7981f6f3f14848b2e07858262efef293a3fe7139ea58a6ad1215d5865083a278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...