MAL-2025-67701 Malicious code in delicious-amaranth-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f678a35f7899a5000e4c38699729a434ecf46b8595e6b389250e7b2446978a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71585 Malicious code in wild-fuchsia-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50525f3aeb8b5ce069def9394862038de8253150b232510e7b08c8be61b73be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68970 Malicious code in intimate-amethyst-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98228dfffccf4c886bf9b3fcded1ccff70a0cdc6d8e32f67e3c7b591cfe68087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70370 Malicious code in retail-magenta-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fa05c467f2494cdef9107f31830567d3299b73cc7ee3f21b2fb98bb1979bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69481 Malicious code in moral-beige-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d349a0323e989306aeed79335a104fed1441eb0cc850fc058d8a9159e8830de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71431 Malicious code in vertical-tan-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891ce3f3cdc86cbc11874359df91f55be147e36783a5e63106eb26827ff876e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69800 Malicious code in overwhelming-lime-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a2b2a820eb3357dbe28a474bc68cc5331fb211f6b0a76287b86dbf08c026ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70710 Malicious code in sole-apricot-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e43c86c1c4c0c72df8778635468c857f119e12fa5bab6f5aae6151f1d04e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70026 Malicious code in probable-orange-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a58f7ce6e2d78437370a76458e64ab26fce3fe05c4ea8cd503991b70da850b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68455 Malicious code in functional-fuchsia-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cfb1a2c0ba9dd90e0f80f4e706aa77d4c328ed49db749bb6d8df4f63b81946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69070 Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69553 Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66702 Malicious code in aggressive-coral-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31e197dd17d33d6d7382d8683229cdb0ce761afa105baf2ccbf16e3fcd8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic-gold-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ead1f36f6e54ec7ea92506786df8899e9028cef25f59e83a39ea79b564d02fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faint-brown-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b5c19a377aabec8ce4ffa35bac9aef49511b63d4c8f55f50e50cb87927d400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper-blush-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961d8e26715ae97044a0ec40a75d5e90a5ee5739627aa61b7890ecbdb7fda984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious-black-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf07bb8de4acabc348885baa04e99de56d78d5782f5b2116615ba1e1c4872e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-indigo-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25f560aa3d5a09d62fa1dc6add08e7a1c40637dd271616fd8e3bb2303398eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...