MAL-2025-70847 Malicious code in stiff-brown-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4586cd1978056260d1deb3c6480be0fca3a8c65f9f76d3422e881a04b6da83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71091 Malicious code in then-red-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f1a5fe98331be193a2517d96daa404c77c3a5e172d79174ccf68e8e0bd52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69342 Malicious code in meaningful-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c863f13c59d30ddac1b03cb3b006c53bb6975cf73f037a0b70b7d116eb33b765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71223 Malicious code in unacceptable-amaranth-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb38e006e879ddd07650ba637225d24fb18505b17897ae6d9c247d01567fe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69536 Malicious code in nasty-chocolate-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3991baf6771ea4092697799ae0c40dd351ef54b4d9e45d6c93eddc0b17b1e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71034 Malicious code in tall-fuchsia-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a83ef88c226526ab9d33db01d385f810d27e37ec0e1c72648177d75e331093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spontaneous-black-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e25dbdeb337e2d94d8708d59bb7b6778c66e442d0016b47019e6b512d174b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-aquamarine-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df6a8c706ecc783b476f22181ebd375caadb197f2b982fbba27abb28d775391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written-brown-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029ef2447f7a5e787bf1c602175409266a24732e14762abf5cf8ad72d355d865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459345a400c4fd9e92742b4dfcd73b5e2e48cdaf77ea0ba1cd89ec1a15f6118e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy-blue-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff853311c75c4db40d6a1df7abfacc906fca7336a560550f2f2c84a23b359d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-sapphire-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899c7619ea9b5883fd84fca1ced278b500c76b09afdc33e95cf25d99cca7e48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convenient-brown-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449e7f8ebfaa4f99516b3be1578cf12647901f7a5aaf44428432ed3a360268fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean-plum-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b020a45fc8bf7a15b8806a067847e679bf9e1251f966b2023d922ce1af044e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy-chocolate-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7d68dcbe7aa9c9413536ba4db6b4d277c3f12308374cfcbdbc31d0fe561e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim-yellow-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6516af53b000cd45d29855cf8bd69875a1d222ae586bb210f125389c0eb24f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing-ivory-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f108f3f38dcc727b2ef4116fbafdca1d5e22b0f04334d2ee676f8351dc5fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform-orange-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaba48ebdaa1877eb755b7c2232081d09f2e7795cc739c33c8a192073b5fc0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...