MAL-2025-70087 Malicious code in provincial-peach-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f52f720a5e879d379a77a5e45df3236ded53d0d70d0c23b0fa1ecc3943931d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66874 Malicious code in automatic-azure-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53f4884a9a5bf47a74532b7809cce98c1f7b54162602956361d5e72f4f166ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70530 Malicious code in senior-lavender-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b496652867d1ca8bd180071f9ba47e27ec65a98e0d66cbf75c6a162b1a400a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66691 Malicious code in aesthetic-salmon-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddd9fdefa56d8cfb917e42f59b538673173d341e5a1de6437f11f028f82d35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69828 Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66880 Malicious code in automatic-gray-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81710e6891a73102e1c1ce83b3c70ade483d2a0d566eaed4ac50f3fbcdf3e6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71416 Malicious code in varying-silver-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ba0b3bbeed6858ce4b5ffd4bf8d892460e4f9dc2beca25386dd44029c3c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71079 Malicious code in terrible-blue-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c31d2f2f455e81c08b320b16525e825151809500f538ef68befd7c01c477b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67733 Malicious code in desirable-moccasin-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b189fa70eccd310cc2970314ea3c67cde21f05fe0244f46239f4d22f283c66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-jade-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414886d8f2d9e4a3c107c7603642138a6dd93e6cc3641619d681d25197a97b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-gray-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb8f3e9dde279ed1814194c255e502c0c544950650136e069b73057febd217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-silver-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab481d663fcab2bda857940c929336287921afc510ef98b5e641eb9a263a7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic-copper-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087bb1d2a22ee14dde1b8bdadfe82aa738e0b173b1f5d04b4c53e7224d82c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...