MAL-2025-70334 Malicious code in required-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2982061858556261e614e1b43d33f94fa04b447fe5d9e59e1677dbec2ed6f793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71558 Malicious code in wet-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257acdbc69da100c14073df4ea73f72e7fb7e3e6f815b1974e3439680a52b43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70403 Malicious code in rival-brown-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262a00aad483d8d94f8846d21aab8ddac0802aacc122947bc45f028866dea53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70564 Malicious code in shaky-salmon-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26238dcc9fbe4732586676036dffcf23aeb8ec69ee779719f0d66383bd3eb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68835 Malicious code in inappropriate-violet-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c60476c0edbc66181408ba98997d71686533b1a0a9efc28141b67e96856f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70116 Malicious code in puzzled-olive-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2eb697643089c881fe8ef8d740df7783292be65b2a331c4191f4524afa98d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69364 Malicious code in mental-turquoise-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bea37d9ebdabcb541c0dbd5823ab75a5d1b6ca4d5a398facce1348448c7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68455 Malicious code in functional-fuchsia-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cfb1a2c0ba9dd90e0f80f4e706aa77d4c328ed49db749bb6d8df4f63b81946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68241 Malicious code in fancy-beige-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d49d50cc1f6ed3eb792e1d46af6ae800cac80c3e9e1a2e7ffb6c43b79fd270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66702 Malicious code in aggressive-coral-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31e197dd17d33d6d7382d8683229cdb0ce761afa105baf2ccbf16e3fcd8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70128 Malicious code in quarrelsome-chocolate-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3650bf43c5209267f01d830ea9601eff058cc699fd68d00f4d84c0549c8b8167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69764 Malicious code in outdoor-amber-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071f333f0d37b6bf2a313cc2a41cbe847a62a33ca509de552a59db3fd3e6defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic-brown-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09644eb5056abf45b687d17181ba94df4cf0d0ae6b8b6c66d65529e6d540b126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a281832f582a19431f5da9dd80e9d556c29d4f7c0423f55eb66cfdf7996dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-blush-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f1e6c77bdd9c139f83ac5d52e3941c698b140522269dd82bcc2fd446f8a7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...