MAL-2025-70663 Malicious code in slight-scarlet-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f2726a87665b474848a451cf5c0736ec22112266bb48a3c9f0b175f0d5b104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70743 Malicious code in sparkling-apricot-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2731b94183927d512826bf9de6b1d897a9b1dc88db0c252ae7123294f0c1905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71418 Malicious code in vast-amaranth-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64734c0e9328fb183586a3c01f34e6422cc78e6042ec4afe7ca88a0d2f61dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70061 Malicious code in promising-beige-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9eeb0c4846b89701c98be52ccfb9503a96dd3c76af465d90dd3bebd58b9b561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71357 Malicious code in uptight-maroon-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed3a2c51170349d30100d11f306aef82e7f1bcd625843e5f8c1f6f5429afb7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70551 Malicious code in sexual-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6151914596df3e7fbc5bbb5b6e9bb4d0dd14880e46382f26ea90ab5e15d023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-gold-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6f454531c2af77305c8ff92e62e55fe1418106c05863cb11510198e7bd0513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70331 Malicious code in representative-green-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7004faafa9d3ad86872f028aa8e3c09524a0bdb71ec442518c381f0c767d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71382 Malicious code in useless-tan-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46c3e4bc81f78f8b6eb7108ace98614c5e286271b451a7c377217f587ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68087 Malicious code in estimated-silver-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d51eda0ec5460a4558fb62fd40d9e007e6ebb8adcc8728b33cdba241dc332b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67360 Malicious code in competitive-red-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a7fb88689668264e178b923bcddf2185faaa62a48f93aadbceed344913d820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68032 Malicious code in encouraging-maroon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92871f00ca29acf65d8e3b37e198171d49cfd66eccdcdc9e0f3247a5b10bf915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70085 Malicious code in provincial-fuchsia-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f438f54ee690541bcd9c04d107d7e3285aaf5496ce2fd5f45611ffd0d6b03c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69146 Malicious code in light-silver-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e163dce4f3fa89dceb1d9b432814698224f571817dd85cc7b1c858cc0f437e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69383 Malicious code in middle-moccasin-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e5951948c78f1a84204733df1726c6f7c147ccd307997906e81139545fd53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair-salmon-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e34b794d12c6beefa8a27caf7d73a74665ff4b2c5219f3a376e6b7c252a385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69460 Malicious code in modern-peach-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c60a346d5b0bd892399ea8aab34dff5d543cadc59e1cd9f08d03bfd80cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-telur48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2775fbf3aa5d0f2f2d3e6641fa8077dade43bd6962f0019ce712680f21610dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-mie92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbeaaa4e612bc3b2f24d1df009103733b5c63cd4361dffb12be2a64edd1e5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-teh99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4254fcaf07d2c7f15967be7a8f8d730b40565896d858825f2186997c69550fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...