MAL-2025-70631 Malicious code in similar-white-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206529509c3f6e07edd868395ce1bd615fc2b1853d189fded8b7fb940f1db7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71448 Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67714 Malicious code in dendod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64de38d8255eda87e27502e6784c528160588ba5fba5047e5edcc72e2f45555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71596 Malicious code in willowy-peach-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae21e7bd121c436243bdcfdb66735fc3a2eb51032dd2a3d2c8e17d8c524acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70072 Malicious code in prospective-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23367ec341fa7d5743420f688d03a77b9b8ba1e189513112275bbf4437882fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental-coffee-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c6017187968e55257a37ef5d357479dfb6fda4c2438d644d3763dd8b6a35e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready-salmon-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6ef8e8554870ba4f8154d6cf2364a67a735f674280d8501e0ae9b6b53717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar-sapphire-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53808f5bd9400c4f2a088bd6d7e0ebba996eef66fbe1c380418c50f734eac4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67435 Malicious code in constant-lime-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80612f031df483c564f9aa4bc20938e434e0f663fab74bfa57d9f28719e8fcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female-tomato-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf66d89a5fe35f8e5d283738c9d1a2f46c3a30e201574e499dd5c11499b0c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66824 Malicious code in arbitrary-apricot-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbfa978e228cbef1cea3b0e9dbab1cf04eb98a63d54d4daeb22794fc55b6441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mild-lime-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ecb0f1d85049faed3331514d39c1660a56d2f03feb1f2e4099457d65b9bf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive-magenta-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9385e54d1d98f957ca20fb4494ca8768cf1b4020452177770316d78aa5e9f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff4051fdf3eea130cf94298a478f92539e77f9aa6b9c09f85b8b1e00f95f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38fec78d3735b58ee0cf18e6bda2a2188bbdfb9c911ae3ad3d4782e365220a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416d23f324b0978398afe760b31f554fcd5bdb60a1a3e19cfbee364c83e3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-rose-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82e59067f7766d27f22c0c14c15b2e4de8c7a8827d08349ede3e733717bd5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...