MAL-2025-71092 Malicious code in theoretical-brown-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59bc5a29cb8b1e8b93aa72fc935a4344959cdb3b5b134825850018cb978ca731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68211 Malicious code in faint-amber-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5791182eb886438626970f7b800fd9e7455301c9b62655e8b2714d0a9f0330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69336 Malicious code in meaningful-amethyst-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b06eee48f2faaaaabef35eed69b34ac8deaf6398fa8cfaf1389fcf9057156e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70581 Malicious code in sharp-peach-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed8f7bdd28dac7d699d6fd09dd2351d371ce322df0ac941b1941b7588ae0889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69626 Malicious code in noisy-rose-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468d6660cdf8ba3c3e44faeefd0221c45ac5d3ced050259728ffdc6e641f9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68010 Malicious code in embarrassed-scarlet-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a606a6fb02abe788e76490871ad66c6291b14b64a8bac28190b546725fa9f4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical-teal-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9fec4a03289680e8b011f164e3a1dbb3ebff93723462a2f85451814aa092a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural-aqua-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e3455e90561789bc8d23615f22873b47118e0fd7fdb19f829f84c7fa7112d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite-pink-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970c3c0e221f432bbf76ed3bac1aae55d231c1700f40c1e4bcfc8a89b3977ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude-olive-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82650962279757424e75119d3d4d14a2a6eeb507110d5b8156454af8e65cfbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-fuchsia-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 201f72acb09215ff2a5d28d822e4cd44ea49b00b5e9a2a198950e10fb9fa89d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy-copper-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc90295e15c2e4d3f98a61b9dc653e69144ac40161a050c9774e990a2edf18d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like-maroon-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056e9b7580d1dc2eb985083d790e4ac0e9189994e958b13de6a22dfcf682ed84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clever-crimson-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742ee34854482456da363c21f5eb1d189966fe0757c64e1bbfd29aa7dd7ec8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful-turquoise-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0626bf44ef86866f1437a91d197782c198098368f1a9b0f15bf20cd783329006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lively-gold-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c515eddc135532b4f81f7a09a9000a71c33defed78c1fda423db1afa566b291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-indigo-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba99ae7c1422e3987e32a11ccbee5a19f7d32328a3d9d113586ed4606b9b10c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-turquoise-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541afebd01471651746bb5347128897b6e119e38f481ac4c3d48b5238526f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66791 Malicious code in annual-aqua-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b85c9d497b8d6ccea223bccd2a402de540a6cc8c9ed3784b0293b5d817aaeb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...