MAL-2025-70581 Malicious code in sharp-peach-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed8f7bdd28dac7d699d6fd09dd2351d371ce322df0ac941b1941b7588ae0889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68868 Malicious code in individual-harlequin-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed59cbffc23436ab197b12359ce8e17abe4217fc8b0d3750353729b80532f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68398 Malicious code in forthcoming-copper-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bbfba63f48851fdfbbb3c25722cf2f51683842cfb0afd41a63a92dc8da8fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68856 Malicious code in increasing-scarlet-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b3738d2bd0684aff7720ce225cda9158168767c1dd93b325f9037d4426b8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69557 Malicious code in naughty-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a081f50c8f9f1529a81c2392169bbf4c9dd70dc82eebbdabeb3b11fa61371295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weird-coral-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a63285c22d8d353efcc0ab0776a970ad1ec25dced4b90464552c408a887728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting-magenta-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35852c710354f1f9d000a925da8839bee1235db7a21e68203dd579392cea17f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing-aquamarine-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257ca123147c80961708cd2f39f87658bfc00199fa4dab1f92367bc232f1a101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden-yellow-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b444b89f8cbd03f853413c16d4d94ad5687d63e9d94ff62681fad60eb4907f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-plum-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f496ddfdad8f25439d005fcc7df8bc0970a2d8541279f668721f9b49a270d4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious-yellow-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e26e9e69dadbc1dcc38b29eb053cab96ce7afc3deca3f3597e2b8d04c0282d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal-harlequin-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cc360feeda1b4538ddf6f00720187307bff9545511f5d801b2b33253f4fbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-lavender-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc20b9420ae376b5bfb11c32255e26053c2d4023533968246ebf06b80a38c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic-white-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b8d3a18904e52b57a8acabd65fbcf2b9a39801acf782dddad36a97ae161337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost-lavender-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6241870065faf470e13bbd0a95c8fdb117a61dfaf90124da83ca3103d318455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-turquoise-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea514f59bf6ddb07caf7272f6c09a7a69bec593f364ff03e8ab690405262999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-indigo-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3e1862f32f2c7cf3c5431a4ef7e7495e88dcf8ec288584c903ced7e8661ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-amber-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2f626000b197e3979037f0b4b999f6a9a2009d8626b1424b2d4b20bcf24691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb044927b16c6649707b6cb828879fe8e932b0f1fca2aa739cb67fb0f7f049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...