MAL-2025-71165 Malicious code in tough-brown-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65eadd0dc03c7cfb53d379280bfc37690748319b29fadb5f944aac41fc8dc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70334 Malicious code in required-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2982061858556261e614e1b43d33f94fa04b447fe5d9e59e1677dbec2ed6f793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70403 Malicious code in rival-brown-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262a00aad483d8d94f8846d21aab8ddac0802aacc122947bc45f028866dea53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious-crimson-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7125ae740fa64abc7e8a08a5014faa7e87a94176ac6c23a4b1bb0d5be31fdbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-aquamarine-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d14b86f91d72efb01e4b5215475d5a53c8d1f01b953e6bef345063d7339339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome-scarlet-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58905e8c44e490c1d78a2ad156372e66dda01891ce9e7d0d29a24d050a9d3078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy-salmon-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ea89e186c278eb2423d71cd64863133184cd2332efbbe51300e3289089ab48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-apricot-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ed73874c57f97bc2fe6e241407ee819096d4967cb8fea7819493ebad514d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin-aquamarine-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a20afc405cdfe6673847f7792aeb3e4c51c8194f414acef3786a5d74fbbccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-violet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22ce9f3e331de55d5e56b36cb03d4947cca10426c7730ca4bf74917311db80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering-moccasin-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65bed430a21b9665a25de32202fbc46453d83b82ffdbea1d90d896c0e4285f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-gold-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869148705d3b12cb5c667a354ad4e4bc63a03e0121612a3e8e369f98691e4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f848b2d6ada58a0fc49d9c9a07c5f7cda5d384e040db17689bf8be37a2a77ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-turquoise-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541afebd01471651746bb5347128897b6e119e38f481ac4c3d48b5238526f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70026 Malicious code in probable-orange-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a58f7ce6e2d78437370a76458e64ab26fce3fe05c4ea8cd503991b70da850b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69952 Malicious code in practical-coffee-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfc0d392d6fd20db08d26e1cec2c4d440b9dd119b16567b021381716f6af451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69553 Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...