MAL-2025-68836 Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71426 Malicious code in veli5631 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc4d84a3ddffebaf5dc6e3cfbff6f981c17461ec8b6322f306033c2c9a0a471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-harlequin-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676711fe202e1319cfb75ca7dc1331b2852b419e2a28f35e65c7ed85fba08d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty-salmon-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acab7b2920e292373488cf3ca9aa3c911a9636a0260ff361be50573523c8c360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67676 Malicious code in defiant-coral-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6730a9a518989a00efef7cc6939e47deed3b2b31b7a5d1ddbb1ac93c2ec57e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70561 Malicious code in shaky-peach-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed6600dfad4b72bf1f773191eb0e3cfb1afaee5dd8006a5bc39310c4575ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68946 Malicious code in intensive-fuchsia-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a983bec79f75ed3e8d06d1b3d73c20ae2169872a78991fb3617d9fdbf52fe35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66790 Malicious code in annoyed-turquoise-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f95a023f0a4a82930a9878f491e7e6909ebef1b929991ab2d2c46b68580bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-coral-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413a9d2909401f377612ae1ecae91c71cfe0073f26b8794dcaf708331e021b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic-amber-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fc3cd0aea7fb4c4b0158bde7013cda89657ad97b5787257f0163766755a1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced-orange-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e6003c0888bcd4e1788f38b5c97de46fd66846046e2b0b91130ce9f8e3e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-harlequin-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ede8cc2d5f23e6c27a45b1edab719b3b29678075f8e8aef92f014d7be6294af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious-peach-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200a135881159e16eb7972d175541fce5ef2aba01bc489e31d7d219e35b8dde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c312a31c8f76fcfdca7982ee4ea8c4c54dd86816c1f44f2651bd27c717d672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69816 Malicious code in parental-gold-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93186d6beaaedf183c381e086d35a7a979389e9422dc8bf83d60ea79c721f200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69036 Malicious code in keen-amethyst-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93c259828c218b61f82db885de7674068fec1232ca5e57820193809dff04c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-azure-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9b688875b4c9acae2cbc6767ef65a7cb30911bb9d740de8fb51c7dca0efea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69342 Malicious code in meaningful-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c863f13c59d30ddac1b03cb3b006c53bb6975cf73f037a0b70b7d116eb33b765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71118 Malicious code in thorough-amaranth-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc8e26b15f41fc6c4e8de51885d81bb0ed8995816202a678a779e3443b7540f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67163 Malicious code in chemical-aquamarine-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35588d3e0469671c3e5718a6152adfe84acdea852d870378d85c16cb747a4ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...