MAL-2025-71679 Malicious code in xenophobic-purple-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece29cfe9a6effd409d6c94fed03cc1a96b85ef5952eccc192f87b574e4d004a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70457 Malicious code in salty-fuchsia-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e0569c808fa2f1ce018cbecab66160f528228cc813f09fc453e9a66a67479a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66796 Malicious code in anonymous-rose-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d6d0e18cdee45c51e2fcd1e55a045f9e202224d05377f3b2c4c44c725eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-indigo-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9618c7107d6e3b367f66e7e14e210a19b4e02d183aae1b212eccad38c205459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-emerald-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8950f91d59215f3c6694e5a9c7f1403d26bbb5d739b75dea3327cb78e5d05c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced-purple-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b293ca94595749b186dcf7cb309dab9c1452b211b5bae65a436fb7206170a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing-moccasin-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bd94da847b607fe81a06ec19cade1c48d7174b1406c524bb306af486793c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive-amethyst-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6bcc3e1b6b35e8fbce7f30a0e7c35e0a3d8b1b5b36f951196f135fe4f481d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c7cb59724468e345ec22cb0e663c032f176fc9cafc37dbf50353bece2c38ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-cyan-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94311306cab5c29716fdbf97c6cc774fd21b4f3b108a080b98f67279e6f357dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-gold-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2218784cc7075d10081552114bfaff01ecb4722a47dd8182d4e4b8152fbd6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-magenta-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f454b10aac316c8b8ee8107a4363dbb35a6765c2df3aa2115aa2cd82a4c8c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69263 Malicious code in main-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973c9bcef0495fed11524b4d8ce2b8c43717c7bab6ef874b81a526bcc5a7ec52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69270 Malicious code in major-moccasin-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1a954d0fd8f4232efe19c45e9c24fa5f09d089c3fbae09ffa04c7c00a1ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67440 Malicious code in continental-amaranth-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ab873b1dca28b41f83cc97ad3dd1217640227e86f74aa457a391bfb37f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66860 Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66840 Malicious code in arrogant-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b6c767d5417558bc30feaf7299a5b8aa918a1b3974c20fa91c2db7f8c1f794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-pink-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b877ca4616991a93d8577b2ca60cbb3eeaeaa2430a0fcb96edf746ddc0dbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6627686f131b3f859b422f1c842cbad7d2ba637fc9b6c34b91ba057a50e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile-lime-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e67ce8a6a8e2637ad7552f455b521cb6c985e4d49f991b430115866b1372713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...