MAL-2025-71335 Malicious code in unsightly-brown-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b143ce9e77d28edb28ee9994844f9eaebc88fd306e41ed944e3f79925ecd7e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67991 Malicious code in electronic-amber-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22e2e1db8bd222c9a6e0147fc20af4d7973d1f81b233b5ab0c7d33b3452292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68647 Malicious code in head-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1630ce5f871b68f8a07f00de0d731644765a008c85ec02b6c598e561d89827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67976 Malicious code in eldest-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8639f7fd51f2fd32e333c3b7029e562537724633ba673ec09d847fc66c09b662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68746 Malicious code in hushed-yellow-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5046b6121bab1999145b9076ee17ff197855f7d1946b41356b1bb5c2e4eba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69090 Malicious code in left-teal-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703508c9f619bee348c268436cc7a6782d6e1fd82a3e3cabdc7f45049bc7130f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68613 Malicious code in grubby-moccasin-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9cf33eee48287783a1a38f7f919e42b1b2b3d3a792fe1fe2b59a3405f73047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68695 Malicious code in homely-harlequin-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8af9cc1cb65990fb888c3dde03693ea9845f022365674b37107b1bfad125b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69680 Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71003 Malicious code in surviving-tomato-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a37ea3d6ea372234e6d87b638d7b67497257254184f5f74fba0eae46629f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71538 Malicious code in weekly-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072b19eb4d5f44909b4cf2b7286ddfe3cac59b1f1f5dfaf8fbf486b17ee4af35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69659 Malicious code in nursing-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a70d5e69b020f526f21497cc1cf01cd8cc42e78700b488516276060e069797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-yellow-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10ef8cdf60404dfa7dedb84a373b12d044415e0a56802c498d65bfd5a5b0dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy-indigo-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba42e54960c742ee24c05c22e1ce6a3edf32f765b3d74863a432298ee9657a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious-lime-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9e4111f5b9862c31b13fb6ae60bced740193fe0b07264e7267afbf32a1c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-copper-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff816eeb8ac3d290a2a4e43413ca714ca6ec56d4cf1bc584f0d4ea02daba01e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striped-lime-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5758e7024697d8a58d812aad5f954191180344c335fd39662da119717e9c3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile-yellow-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dad08c988cee85c53edaa17568b8f0a6b6074623554f9e45c3e6863fd1cc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-purple-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653b4b90182dbb8afea8ba5945a1a93986f37217edb0ac46346a825dd9345dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...