MAL-2025-71584 Malicious code in wild-fuchsia-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def211c66d852174eefd2de3b24a6f80b5b721a45e9dbfc0eb0e5dd01af6c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69270 Malicious code in major-moccasin-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1a954d0fd8f4232efe19c45e9c24fa5f09d089c3fbae09ffa04c7c00a1ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68506 Malicious code in genetic-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631e2e8ab0e45528fa7a8fcacab0eac1a8d4b787560861ff8e93024076bd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68883 Malicious code in influential-salmon-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420de980d7bc44a88f0b8266fcddfd0f16a2b277d0fa4f11287b82db291a597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68870 Malicious code in individual-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f164af61dc4ba6a5ace4c58a383ad84235ce221a763ebf189f89783d25299d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66753 Malicious code in alternative-harlequin-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2cc21f403a1333178bedc367a7be27c454ae0e3547b4e5c80fee32e46673b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71497 Malicious code in voiceless-beige-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d271aaab1f2c710ebe4ab5063401bb9e0db552d40ba4965cee3a5db0311c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71713 Malicious code in yearning-purple-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7303118a01ea0ab3370bf1cc9ca5f91870d4cbd13b6f5d30b7648bbee597cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68736 Malicious code in hungry-amber-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ab10333c4399bb21af31a3bff8ce7c7619f2ee6e1a4398e141fbfd88cf2efa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70616 Malicious code in silent-coffee-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ff3223a62a54a89e678df6f46dd92fccd39ae7d1d69ff9ee5a79efccccd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69498 Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70794 Malicious code in spotless-fuchsia-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fa327a7424308a606a7d79efafc8a0f289e57753c684461b121252eb829379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67942 Malicious code in educational-white-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30e9d30e826f0607a329ce5c07187d1465ffc4c7d10a6028d2c8b25bf2ebd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66860 Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71354 Malicious code in upset-magenta-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd465043101730d099d86c31167441fe11423687e0042e3218237f6f57d79bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-magenta-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f454b10aac316c8b8ee8107a4363dbb35a6765c2df3aa2115aa2cd82a4c8c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly-brown-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5756ab1eaf1d1cc010676afacea304d2aa6789a1e195099bf2feac7abb4c8965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-green-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29936a485d34d73872a7532d9f1be19c895616ae7926c9ff91f63961670fee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...