MAL-2025-70834 Malicious code in steady-brown-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776a3cfeb48fbf18eb1159f9d79d1f9a688ded670927161158d18d7694b6ce2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar-magenta-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e7f1a7dc00856ef8531a99554365c82b9c554354fb0ff393203de8b871c5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable-turquoise-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49817fd42aa1b0250b1f67928d31cf5c034d49f4caf133b1bac6e5b05217ee7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited-blue-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85176b6f4eac9a75f4a6b045da6f7dae6b156636474453fd5d2dfba40ce06e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful-plum-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee904dac3fb36e866359f59d5e33ec412a716ae971766d2a07d44dfbcd9a63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten-sapphire-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4702f21c8e85d3e3338244e295e5990ab7e4abd2133f03ae4e33608fa14a8d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-orange-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc84769220d1ae0d2715861f7e7261482ca2e088c1949697891fdc3cf4518620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70963 Malicious code in supporting-gold-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5570c8b0a3cfe16514b40291632eab8768e38054622b46e6fd1c12d1b716d73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70410 Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual-jade-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76dab5d13f3426b441d8e02c6d93f5dc9a472695a87ade9338bc6e77149d65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-tan-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660c0e994394f1e75c0a1fcc8dea6a9b594c7d419cba759a45312c9193691fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b93ffe38e8c221307f7d85dc8da59a42246bb16054d6c6ab517b1549ae3695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67649 Malicious code in decisive-brown-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5fb16db51cac1deef1bc979e211362f3027d00773e1c92411822a154ddc02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70190 Malicious code in raspy-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef129651446b88b9b77a46df5ca19d2ae7fbeccc32edd865b74f41626e7edf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67481 Malicious code in cooing-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1535b1b6a124b5fbf6bdc30c9f814a430528e3b72f995ed75b88cb9bdcb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied-green-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06622dc2abfd1f849e07023eaa792a6080350ffcaeef74789da7eaa699f66886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-blush-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68781f6281ba14853e31d1de5f1bebf9197a7d014acd48deefa8cf5b1c8028f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-ivory-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d3a96c0f8e2bf9a3c032b2644c04aa55e31ac0438a42419aef0370e4c5246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68115 Malicious code in everyday-silver-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabca3d24ef9893dd9ac2ebe28868486b3b7034b53f67af1a41400f4c3cd859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71656 Malicious code in wrong-lime-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909de9319a8105f536fddb641b6ddb587708a9cc3785cfa30f848fb65353754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...