MAL-2025-69438 Malicious code in misty-brown-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd09feb7a2a579e7b92748f5f775d04c0c7e99faf8a998b625603fd082a4c101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66809 Malicious code in apparent-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c312a31c8f76fcfdca7982ee4ea8c4c54dd86816c1f44f2651bd27c717d672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70560 Malicious code in shaky-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e683dc73ba5a235a1a5aadf83c393051600975edb16f720a3f1df8d349814b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70892 Malicious code in structural-aqua-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585d14ec5ba0c3539cb50596d26d5d28a6cd989477deea44ab016edb5d438157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70070 Malicious code in prospective-cyan-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8fe3b290c367ea6c931c84de8d48f0d52365807af3851222a144a9b116df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67874 Malicious code in drunk-aquamarine-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a1f7004ce24ef63fc53b578b2dde94068b56c086d99403257e1eb93a09bcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67157 Malicious code in cheap-lavender-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad4c00b2f73e39731bfc44232196d4517bceb4cf03bcf9d70417bef651fc1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68868 Malicious code in individual-harlequin-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed59cbffc23436ab197b12359ce8e17abe4217fc8b0d3750353729b80532f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70248 Malicious code in redundant-lavender-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657893452dd9ad60bea7f7ab116233f331a1aa4bb05282aafcaf1316178bfd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68398 Malicious code in forthcoming-copper-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bbfba63f48851fdfbbb3c25722cf2f51683842cfb0afd41a63a92dc8da8fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71276 Malicious code in unfair-orange-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946c9f03cf05416d7b26062ff3cf16766e095fcebf7ac9d4a2649e74ea52441a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68211 Malicious code in faint-amber-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5791182eb886438626970f7b800fd9e7455301c9b62655e8b2714d0a9f0330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68732 Malicious code in human-coral-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae407800d8c6f3324e7594ac8fca90d7b233aaf4d70d0e437b8996ca4767791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-azure-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f4ffb7d7fffb9bcffa675a82262c43d8f15f84ba5f5baaecf5a817e5ba13ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial-copper-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f731cb15bec2e0aee4559b6c57d89f0406b221401cea572489eff696f53824dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile-rose-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc544884a9fcfa4d0ca3f4823ed7420bf54e49d5c0e2a0c3d3e1b5ee9ea17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in operational-harlequin-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8190b8f18b5686db934427ce2d89d46cc91f16af18374b0de232f961af7aabf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated-turquoise-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b96ac3a8fb643a14c82c101f5a99835eb95dea2cd2a8468482eda1d7f54848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...