MAL-2025-71335 Malicious code in unsightly-brown-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b143ce9e77d28edb28ee9994844f9eaebc88fd306e41ed944e3f79925ecd7e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69745 Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70989 Malicious code in surprised-white-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb42abe5dedf95bed57b1a4d6cc51b8c6c795e1064ccf7d0782277a64069d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69659 Malicious code in nursing-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a70d5e69b020f526f21497cc1cf01cd8cc42e78700b488516276060e069797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68746 Malicious code in hushed-yellow-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5046b6121bab1999145b9076ee17ff197855f7d1946b41356b1bb5c2e4eba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69469 Malicious code in molecular-jade-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f5436e2e1ac7530de2199d8e773808e6e697b4c24350916fa155a99451bb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71538 Malicious code in weekly-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072b19eb4d5f44909b4cf2b7286ddfe3cac59b1f1f5dfaf8fbf486b17ee4af35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70577 Malicious code in sharp-amethyst-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bc1c1485aa1b6284c291fa195ee6b09c29aa0024582ea46f3a162ed8587665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71207 Malicious code in ugliest-apricot-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c14735b07017a5cb8c9b7c19d28bbe1809b24a9dc16a0e0e5da411f1361197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69304 Malicious code in marine-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a138110f729f9bb7630bfd7cc294d29fdf6379de68f3fe99b9e7990d62ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67014 Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71003 Malicious code in surviving-tomato-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a37ea3d6ea372234e6d87b638d7b67497257254184f5f74fba0eae46629f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67976 Malicious code in eldest-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8639f7fd51f2fd32e333c3b7029e562537724633ba673ec09d847fc66c09b662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67529 Malicious code in creative-aqua-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5659c1f34205fa43ba5d17f75e523dc1f62ebc3ea2b16868c7f1d744870634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy-indigo-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba42e54960c742ee24c05c22e1ce6a3edf32f765b3d74863a432298ee9657a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious-lime-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9e4111f5b9862c31b13fb6ae60bced740193fe0b07264e7267afbf32a1c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile-yellow-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dad08c988cee85c53edaa17568b8f0a6b6074623554f9e45c3e6863fd1cc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-copper-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff816eeb8ac3d290a2a4e43413ca714ca6ec56d4cf1bc584f0d4ea02daba01e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nonkruck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79929a5bce07a228495a5645261327e0bba7990e0403b63149930e5b26e55780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-green-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272fac395ed048e4b4912a4bc15bc530d6f90e4f953123d2a78b6515b78bf641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...