MAL-2025-67995 Malicious code in electronic-white-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64bbab7f84a8eac0467aad50b159cc1d425a8929dfc991e07ced926f437560a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69868 Malicious code in permanent-ivory-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31778d88eb79a1f7cb8a2148562b5d621874aba2473ca6a6387528cf9f01663b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67450 Malicious code in continuing-apricot-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a8d62412e7e262a9f6ba076dc6d37f4f54922879e7656aa0ebea3062d7910f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67075 Malicious code in brilliant-silver-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138babd2e9dc479d5d7b853045d1d3a8129be15e4f824d3794f26a79e5228fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71119 Malicious code in thorough-amethyst-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0397318b7b2fe19b02dc65ba5d0e83dfcd6ca2adc224522b9bd51e03bc6d229b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67091 Malicious code in bunneby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5820cfd0dccdb0254edffb9a5e8189cf207068c5def25bf81d048eeae5b8a5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70465 Malicious code in satisfied-aquamarine-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb98ca04511525550de5ffff3d4060af4c9a48c61afec738856f4fa51de21c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69517 Malicious code in mutual-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f88a81de5855bc0d779515f519c145904c8b959b10b4326141b01eaf1805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68391 Malicious code in formal-tan-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b7af47f718a58247cd0b3e993a1b866a6d6c0aa4cb45be4b226903f8ae69cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69249 Malicious code in mad-sapphire-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016ba71d837c76d976017acd082d0336a151fbf8e277c8b325ca36afe78b8ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70841 Malicious code in steep-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8821c2cac5fe1aa35260bc2bd9e51b7e139130b9049e16b6ebfe568a86c3f5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-coral-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3589a5d770d47f3d3b30349c1143360702bf908c298903f36f82c2454e8dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable-olive-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1629bfa5aad124c27f6bc0b8ddeb68f69c3283cda5c0c91f70731cd72f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-silver-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff46723e5051d67aa359bb74848302dba9ced28e1265d10c2a79987afeda3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-aquamarine-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595653987fa31a45a30f71e6e139ede2fca9020e7ac69f179384ff61a7cdb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval-moccasin-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0514163e90cbf962ea78b0d785549a792d381912b7765ce0b6fe924344acf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset-brown-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62a2382b1b0d1d4f63b419b3965dc1227c8807ad95d938b02750f3f19bd4c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-coffee-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56f526985542c41bd32e6433b7f3a3fa3496c5abb254554ab888707d85913d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...