MAL-2025-69389 Malicious code in mighty-tomato-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1280df31ebaf45f4a2ebc83b3ecadaba873cecd55cb99ce517b933ee41356092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69539 Malicious code in national-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1204eba7cafa0e4a5fba8172b6d99e52a6665814665456d648b7f9cf723361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70892 Malicious code in structural-aqua-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585d14ec5ba0c3539cb50596d26d5d28a6cd989477deea44ab016edb5d438157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70923 Malicious code in successful-amaranth-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302f5637ca31426581ca9f9346e52700b193881e62f96e7b07c5db81e19d2eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67904 Malicious code in dutch-aqua-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4332c39d396c4c83fdcad3e912bb7eef53582c4475ff775b2adea5faad2e6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71211 Malicious code in ugly-fuchsia-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aef1df003ec4fc2ffb0c9b61c6032f27a58e03dca395481210453e93309853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70782 Malicious code in splendid-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f40430912fe11a055517b10085d1bb2c1f62fe9c2fd64635fd66a51628569f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68912 Malicious code in inquisitive-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73eeff2575204b17df619174300885ae64f3d498b76fbe745cfccba67ea2cfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70139 Malicious code in quickest-silver-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c585e538187ea0fef65963f6a2af96cdba88b14168c3e07c36f49fc5d5f86d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68926 Malicious code in integral-crimson-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781c1453c4b5ba6cc337af27e030efc0df4edaac77cabf347126d79938f8f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-blush-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e20dc8c56af8006c1cc75a3fd965876d1752f7d3be749e0e4466cba91213af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69557 Malicious code in naughty-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a081f50c8f9f1529a81c2392169bbf4c9dd70dc82eebbdabeb3b11fa61371295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69999 Malicious code in primary-green-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c628f0dd3c06d481f70ad0d075c7b928910b99016719bc7109752d6b5952e539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68897 Malicious code in initial-tomato-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9371a6a94c80da6104b4cbc63e4c3c7c8285bbfade217a535b1918a5b6ab36cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70248 Malicious code in redundant-lavender-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657893452dd9ad60bea7f7ab116233f331a1aa4bb05282aafcaf1316178bfd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-maroon-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae7ffff45f6462ee052333e75268751b29cf8af656df9ec8a8c8e28c53ea070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/ciphersage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2a5b3466a9a0966cbec8fea3a3c30a21f29edeb9b0c51f8e727affe28a1106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9149d6e69ecde9b2b2bba6d96e3344b404209f74dfd4a68e03aeaa250ad58d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d342ed90ef9ec6b3167c1f6c6cc32a1afcb6922b8023cceadb2c8ed64c05c7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...