MAL-2025-67436 Malicious code in constant-orange-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8826d60228e6f32c5ba801d67c490ff1a586633d094726c624571caf02028a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70769 Malicious code in spiritual-amber-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4f5d94082d509532e8f71e20e1cd25eda9ff05a84379206bc281175df88437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71560 Malicious code in wet-fuchsia-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc286af9d2e0a41255494c4d189c18cbc520b67466932736784d9fa690cede40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-jade-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211d83fc83360d9341bde831222de9ecc51178a375a49cfac5d22d7702afaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright-blue-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae86328be7b933ed6c4046dc82c86e820ff24557be0fbd36604fa224e3a3ef57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative-amethyst-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde117b7db532ba1b468a37c91df776dbd64c414b5c0c0a6770042f0d10666b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bottom-fuchsia-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad6fd6a98328f8630cddf652ba80179bf8d430e0c20a3b2da3c6843e144a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly-brown-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09012ed3a0d324221857fddcb7a5845c4c97492b31b8395678d50b4c50a76822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following-black-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad715a4d66ae3db827cb7c0b17b514672bb6b26f076d556a70954f4666996259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67993 Malicious code in electronic-coffee-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb106ce8f56c4b1162417acaa0e5c33edc18c62aeedf25679d22018ea0cc36eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69605 Malicious code in net-gray-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207d197632e8546f7623e57c730878ac33c936aa5144bb8dec19af81652339d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70262 Malicious code in regular-copper-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04385f3ee96f5e0aef503af6b8a9ef430d038564364e936bb89186b4120728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68117 Malicious code in evident-aqua-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d6cf6306725d18e93547f1c776445f2bd8a80380d3d10e89ce70d835a051c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67503 Malicious code in correct-brown-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba8aabe183b5c7db186d824cda15d67d593aaf061f0e717f46f98d2807150a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70785 Malicious code in spontaneous-amber-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf092a425f6449b7028bf1ce4c40881a76dbc8619ceec2d13a602a645780df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69538 Malicious code in nasty-harlequin-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2d71d5cee5b1f092013b8e46ea6ba365d5eed5466ded9481e2a9a0e59e6e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70821 Malicious code in standard-beige-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d25b32ec8202bffbb91b5fc5e144d0545591a4f3b030a46086a6fd990b60b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70223 Malicious code in realistic-salmon-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6182fbc0961331903bf47a5def3f4057d85647ab5c6343fd745c94d8ff6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67838 Malicious code in domestic-salmon-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44ae1a5fb7eefdf4147925291dfd556a78394e67a7bdb76ca2addaa65bc19e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66805 Malicious code in appalling-teal-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612fd801148ed5818c5a011418140b35015894a1a1726ef58fe74f9622a66856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...