MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69217 Malicious code in lost-indigo-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ef9e45ab44a18d9df480c09e2f4a4e560a3df91f77d7f20988fa4be97855ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67980 Malicious code in electric-gray-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0df0e37916912c185103a15bfc11173d3da0e3fd18ce816afe0753999ac6950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67287 Malicious code in colorful-pink-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0daee748dcbc689f30cae08ab1c8dc7426eeb1bb490394678ce858aa33df1108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69270 Malicious code in major-moccasin-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1a954d0fd8f4232efe19c45e9c24fa5f09d089c3fbae09ffa04c7c00a1ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67687 Malicious code in definite-purple-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33cdb4effbbded8bda967d15f69a73daa4535590accf90cc2fe25172ab9a22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68506 Malicious code in genetic-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631e2e8ab0e45528fa7a8fcacab0eac1a8d4b787560861ff8e93024076bd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67425 Malicious code in conservative-pink-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6c8eeb6c052d5b8292efa3f04ff30e890681a243f67068b414b6d05d99fa1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71534 Malicious code in weekly-azure-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0b60931fc57cf290f8f19903a45daa28d07e9589eccd4bc8394320ad986ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70497 Malicious code in secret-amethyst-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c8de8eca33dcc775bada0f3715b073561aca260396acaa394f93be6386fdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70794 Malicious code in spotless-fuchsia-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fa327a7424308a606a7d79efafc8a0f289e57753c684461b121252eb829379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68104 Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68783 Malicious code in illegal-silver-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b544b2b20b0860cd4a305b941f4b8631675f5e947f73b8a191d41cec5127b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67498 Malicious code in corporate-sapphire-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ec4b4db9224762149fceb07bc18ce16445721c65af4bd38c48bff1602e98b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66890 Malicious code in average-magenta-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9e6650658a0be1840a7a67228ae568df9da6f02cfea9aba4fd9eb65e1b5f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exceptional-purple-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 251f71e34193bbe24fc541663a1d766f28f404a40e3409384cc3b929a1dbcae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-tan-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49884d27c85e2c5e78e2ac151717de8f3b263db8f6b8a0c0f1718a2bc67ad93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting-scarlet-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75c2cb385c52a546c62e3c58eb51ce749259788941929e0f3202105ae7e9868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tame-scarlet-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a2f946acc683f6287e6da0a647ee714f525ed8256d554703933b889ad54ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...