MAL-2025-67652 Malicious code in decisive-orange-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d01f9781e1840dadfecec22f5240e358b4ffd4bd9c1a69c70a77c9680d2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70190 Malicious code in raspy-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef129651446b88b9b77a46df5ca19d2ae7fbeccc32edd865b74f41626e7edf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68587 Malicious code in great-scarlet-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3147b76c5b8aa84e99f2ed0805b71366a5aaf48466f9f629b2e783fdca72e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68115 Malicious code in everyday-silver-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabca3d24ef9893dd9ac2ebe28868486b3b7034b53f67af1a41400f4c3cd859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69162 Malicious code in lilysuesu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7fde76e12d7b6be041acc86adc1a7085af7bcca0b24d874c16467df99dd751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67414 Malicious code in confused-harlequin-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce4c61db186e410aacd5611d791f8e4dc5a7a4d3f31730bf72ef4358bf726b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71656 Malicious code in wrong-lime-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909de9319a8105f536fddb641b6ddb587708a9cc3785cfa30f848fb65353754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vague-ivory-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a98975589d9ff557ab6b2041fe9348b554b9ab09e0af932951a101e9333851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional-plum-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc0e5401da238794db8ef7e48f838d73f10794df2f822d06e26350a2fc3a940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint-amber-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56330ae901124e9d732a548eaa2622003ced4591c4c5e7ff43149cd05f9b27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-olive-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0940f9791e0d7a41a57b3916d05a6362323a0d6e840d65a31ada4a11f4225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil-apricot-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4652a58f2e9bbf7fdd18bb1bcd9cdfbc5f544cc85880451345043c9e6fefb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky-indigo-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf398f677bd6b5b67694d38c9552e89c5d027e6e51f99ea1da826d96863f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70250 Malicious code in redundant-scarlet-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f579405582de98dedff841b6645080181a2c9a4cc838b12c9401f937f45c2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-lime-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f5367f8dbf65e345182207060c2655dbc0ae20fe32e1929f6648d4bac6d834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery-amber-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b565d931ee9c549c8e11b892de50c279aa329df8c45a0f2d5dfd9d4198f489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual-magenta-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86502e71f7514f1702901721eeea288fde5aa0fc50cbadce058e9d360e162f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding-brown-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140f0f0b23309eaa3c89c6004f5dc95eaaa443a55993c18be267de7ea1cf8a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national-lime-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5c59af67c62f2927ed86c5602b9812e6c38179ffb84a3142f88a482674f7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...