MAL-2025-70960 Malicious code in superb-scarlet-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad566814aa021757db165bb5d59567e4e35502b0942ce1e0b9a5e5f9610a90d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71138 Malicious code in tight-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b667714801dbd50a93162fdcc91eb405474a4a7dcded20178ceb63c415a896e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing-gold-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889213d56f78d509aaedfa44b21e33a6e08ed29068b7ebb9aa8d163ab4e144f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-orange-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d6d4e54cd6513574c9a4596e9b1504bfc2c362d3419cd12379bcf1e2a28cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff-red-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa5d5700c6127849b943127fa1c1aba66ace916d36e1cf64f58646a7b13a7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-apricot-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412629b0158b1602c1c84a6007d27f9e4502a403f63a9894093675d65a6357f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68113 Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68656 Malicious code in helpful-apricot-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4230a655c8c9f685015ce4ff82e5f5a4a4b4a098aa15837d3d34f23aee0039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66732 Malicious code in alleged-aqua-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd480ea24df9b0bbf1c329bac6ee999198d1a94ed65c126f94d44ad21b2b5af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70599 Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68984 Malicious code in irrelevant-plum-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b46b6c9f07a915d1908cb0462ace9edcb6d55dec50eb1ec23e7affc2827a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69829 Malicious code in particular-red-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5575dd5e1c15fbe19dc7886e281352b4acba6ba3309e0e3c5aac4c02d286e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying-green-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c908dc2e8c74a5abb2de9205fc910e1276ef474ba1bcd9f96291bc977342dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71095 Malicious code in theoretical-ivory-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599224aadd0a6283bd4798ebbaa9185df72af0a0d51f4815c25e22bb4c38549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-yellow-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301c42a74a5be9343f5353efb6bdc9b511fabd842b30a9c3917605e0e1169ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...