MAL-2025-70248 Malicious code in redundant-lavender-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657893452dd9ad60bea7f7ab116233f331a1aa4bb05282aafcaf1316178bfd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69173 Malicious code in liquid-amber-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b099d18035ca7fad7bf1e455b43b1003b9492074903171c2b9f9f6419d93fc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71329 Malicious code in unnecessary-scarlet-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4730106025f1266dc8d750042ca099737e9af7e23bd1d83b9c84c8ad196c8d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69757 Malicious code in original-gold-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72743afea14a8fdcaeea05d149201c7be371c9b0baa8157c1dd64b75d757169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68856 Malicious code in increasing-scarlet-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b3738d2bd0684aff7720ce225cda9158168767c1dd93b325f9037d4426b8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70560 Malicious code in shaky-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e683dc73ba5a235a1a5aadf83c393051600975edb16f720a3f1df8d349814b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66744 Malicious code in allied-moccasin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37e35c7eefee0d4b16c8347a56765021498806a24172680838e810f29f8c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68239 Malicious code in famous-red-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e57fa9524cf68719194faefe80b5c71152abf743c7b2c28a8b26ff6e4c188e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67279 Malicious code in colonial-fuchsia-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662a0a8c9007c727438c85e0fe7387b7819bd11b13cc7c3c27ad68cc1382d4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71639 Malicious code in worrying-rose-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d3002f45cef4b61af531db899b943c64f399a6a6ea6204a4c0591c736b56cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind-ivory-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886a79068e6421a20272c79d59baa6c9bb70380233aff6c84d941578f497d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social-white-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8c84ce7a15710a2cfd9b031b08516717d86dfe79ec5a86f366a7be41b277a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile-rose-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc544884a9fcfa4d0ca3f4823ed7420bf54e49d5c0e2a0c3d3e1b5ee9ea17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173d922fc27344c632c1a729f1edca13ce22d434693c1a30beffa8b87dc92eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential-amaranth-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90a450a0a8ff334a5d41905743c9a7984981153b9c71464c5c09768012ce5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial-copper-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f731cb15bec2e0aee4559b6c57d89f0406b221401cea572489eff696f53824dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in operational-harlequin-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8190b8f18b5686db934427ce2d89d46cc91f16af18374b0de232f961af7aabf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-azure-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f4ffb7d7fffb9bcffa675a82262c43d8f15f84ba5f5baaecf5a817e5ba13ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome-white-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2242212ce964287e26c6d7d1d186cce4535f06aa0cea1f73d91cfede382c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...