MAL-2025-68861 Malicious code in independent-silver-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5146524a5491b8f8b5b0d7c09096983c8cad001e274ccbbf4cd31e4e6fa070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-harlequin-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfc8a1d5caff97f46c2f8d9e3b7b9e0d05430f7d839bdd0f5e7df0c38f2c245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy-chocolate-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987b84d257a25254d21bf2ef814314447124a57e0cfdd1051b75ab7e555f9501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-blue-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e34e99fccfca357b6068efa82064082fe6bc32b37dbded2b5a10c907f5e1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-tomato-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da025e7ab2a6d12f0b2538355a04d071c822c9e2daf4448bcf7ab4d899112759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist-violet-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f93cbfea10fe0de435e70921b2543fa2bf5da9addad72241f23d173ce2e2d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent-rose-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da82e72c4315d982aee6aeab4fd387972ed302aaf02618d128a4aa8a3819d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical-bronze-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a0dd581f821493fc661eca481c5265937b9fd0fc37d474dd4e626df56e6a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful-black-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bd3af7080a5ef8b874fdacf6fdf27d8e6459fa440646d20b91b65216cffaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-jade-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4c9b64f2d6f49f51711bb433ada582350b0a007a8065b7183950e9df8a4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69989 Malicious code in presidential-green-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb380cb4d5f7b4c7dfc2f9246f5bf5a3f36c4608d506f754d7fad17a4ba0136c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69122 Malicious code in level-lavender-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a059bf1b158ab7631037037131b9bb21862314bd98cc50a98aac5a01eb9e104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71054 Malicious code in technical-aquamarine-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0b72ccb0206d34fa4a0059ea4ada77ed51b3bae187489d4f0f5fdb584134f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71269 Malicious code in uneven-fuchsia-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a1c909b517cb679543bff313daa26ab347277a7b42a2b5bda61c65ca0176be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68040 Malicious code in energetic-beige-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31927015f010eacac0dd53063ba10ac2f00ebb612de3b9d5d9d766719db37bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70356 Malicious code in resonant-copper-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6180afe894cea9c841c42312b2d9233174f9d2c2ff43df16d12def22cbebb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70734 Malicious code in southern-copper-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad002c55fecbb0954ed38e06d33d1bbb84f630afa3b374b6228c396b20bb929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68979 Malicious code in involved-brown-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21f011a0b1056ebcd3759180881f220dbc3db80ec9a25c3332326a79212e2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67837 Malicious code in domestic-orange-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26f0ca5f657b80fc9036dbfe2f6e4a804d35ce7b64dadd48c7973822c04a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69138 Malicious code in liberal-apricot-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddba2e27f104eeee2d621a20247beddf762809fda8d247e37a45d8a7a77debf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...