MAL-2025-70847 Malicious code in stiff-brown-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4586cd1978056260d1deb3c6480be0fca3a8c65f9f76d3422e881a04b6da83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68135 Malicious code in excellent-green-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8249443b25fd6dd0d9b723dc5f46443da76941511dfd68cfe806252f02eeeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71652 Malicious code in written-sapphire-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c851f0018689a0b45b91d876b8973f078fdb87084a370d99c36d8a906465f906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71091 Malicious code in then-red-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f1a5fe98331be193a2517d96daa404c77c3a5e172d79174ccf68e8e0bd52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67434 Malicious code in constant-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f562a79cd0253b53812371f27fdc20f9e007b04a03b1907f377e53c044e1080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71034 Malicious code in tall-fuchsia-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a83ef88c226526ab9d33db01d385f810d27e37ec0e1c72648177d75e331093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-tomato-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020d7d775f5a616c9004b03d2b538e77c7c20b191d02105b3c28af959c6102e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual-tan-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f4656d88e72da89a3ca6f434794a88e00e3241a59124a27110e2a1a6260fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic-moccasin-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42bca095113880b53a3cf81579f4881b197fb8f20598b25043aad2fc8c31fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free-rose-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b272696f94e863e2b56b85ac9a06d05c0a77a205cbd1f8e08f5a00462ed3cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct-brown-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb98fce074b163d9e5e983fd84da2bb2cffd49b75f4178ed411b8d9f3729778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-aquamarine-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e89c735e801d18601132e7a0b03a580372727cd1c232388691f4928bc22599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-salmon-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289c3d3e1391f9b5a8ceb987759bc6e38535498a47b135b34ddaf63ba3bee2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy-magenta-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98e94928513c093f106867e08c83fa3c380c40107e6f47eb7240891c8a6e6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial-salmon-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c5aaa53f9f9ebc04f08a0ef8421307a218f095201150059c08f1dc3f6aefc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful-chocolate-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41370443f2a809e5203b0aafec6fbb5f4f07b93cc548469d0b042821d42d7782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial-gray-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3af0b5f3b615de2a59bd8156ba8945682f6d3a2468b3baf8bd61914c04dba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy-blue-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff853311c75c4db40d6a1df7abfacc906fca7336a560550f2f2c84a23b359d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...