MAL-2025-69760 Malicious code in orthodox-harlequin-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617c0cc8f5560d2e454db2da4afe9e190cb3417ed4137df1ebd91c8d601c5d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative-salmon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ea7a48712e7659e37c8c0fed2970990a212875866f0b3e418cde7fcf18c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right-black-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d93e95d5bfe44016dcb7d0608937ab66981ccc2aef52487d0696950ff1da99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-black-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64be0bce9ec1210355fec83c9e869a56fbe0b598e55aa6293b8959bf145c1ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-copper-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c4b63883ccb709694df00325e9d5182362c77e2eca8efbc0dd2ddc84e32ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69026 Malicious code in junior-aquamarine-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5c25fbe848577565d1c230f54001690b5746be07642850110c0e731f8f807c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67973 Malicious code in eldest-amber-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200608b18e01a83410b49df32c1bc4d510ffff46098bdb42abe9e887a4a6e118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hieuil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67eadbeba75e1135e2ab9236e48fea0a4e93682441de3461cd59e1c06c006fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair-purple-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1378640b3c692592596551faec9e702160b564196bfbda86ead17c22e099cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational-salmon-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76038228a7193621c1c5683edb6658af7d3c22fd56e2a991906fc33c8468daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70500 Malicious code in secret-chocolate-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d7bf5dcebb64a8d8783f6a1867987ed01f14577ada5e5c129f3c8bfd3e25fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68977 Malicious code in intimate-tomato-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f167a20685872395db398e3e1dbeae1bc9a98b0c62c1230d92667770efaacd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70955 Malicious code in super-peach-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9459407e4c096c765f48c9b702a6743072979bd911f20c1539d31fa21ada4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69434 Malicious code in missing-orange-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad0f023e663bdb05ec7c31243516140dcab488c44066ca22e81b69d493db54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70911 Malicious code in subsequent-chocolate-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8235263945df4e8450eed547dd5c5c9457588f318ba3262f19eacdf9f7456e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70327 Malicious code in representative-crimson-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d89cd3cfbb5376aa8091140e6c592392eceb6d841b76826f1d7a000e0d4d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69829 Malicious code in particular-red-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5575dd5e1c15fbe19dc7886e281352b4acba6ba3309e0e3c5aac4c02d286e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71182 Malicious code in tremendous-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1c94553d2b20f6af994e3a9196c4c4a648575605ed9353efbc2e323e268317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...