Malicious code in technical-coffee-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f0acfc6132b8528998fb886d4413ce25343580263ed594e66e9ba714bacd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68216 Malicious code in fair-lavender-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732347c8b5bb00b2554a9358eb29eb3aee4643aef04d6b44cacd3064e68c6abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67954 Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71672 Malicious code in xenial-green-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b26af99d628c9e9f7141b6784f4177284f9ec13bd2c4ce2d3dd2e5564ade250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67754 Malicious code in difficult-turquoise-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c3364341e8864a47d15cee7b7842ed57e7bc5c54c2d824563fdc1c47eb67c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70269 Malicious code in related-jade-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473bfec02d7b6faefddb11bc30ef2f44960b13a6c80c292142c3fea9dcb025bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remote-azure-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3750d1a0a08d275502ced38fa636a131517f9c0e269ba3f489eee3c9239cb0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective-amethyst-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0c65e117306be60ddecd607f8537dc81cf1824f1dfa79a22fe45e8ea2c29e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-lavender-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1e1f103a4c659dfc3629a9f84ec397470f31f3ef3dc985c6b1172a2607b350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632f867a7ac504ac32684c53046fd6d1a8e77928d78692a7855aa99fb556696d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prime-red-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9898b690d0234d89ac0595780bda268eedf8688f63afb98489aca9ae63480c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71606 Malicious code in wispy-green-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19975d8f0a4cfe353cce3eb88060e7cb2f5da670f7f632fba225a21187ae8170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70495 Malicious code in secondary-tomato-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0917210095ffc5c7a3f3afc4f4ca3a895adbbf212de97db28fa3f9a8840470e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70098 Malicious code in public-black-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3fc999aca0551f714484f9aad8636c3e4ed44306d65a0f169d0c1bd7647c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69141 Malicious code in liberal-lime-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb06f9883a5f5cd72f06ebfab4439b5b2ddfca984268e70bf1954798c56b4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69153 Malicious code in likely-brown-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b70e58c93cd325a4d1b1bceece71b074cca507ddd28eef86b8ceea0db4c23ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66822 Malicious code in appropriate-purple-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe6ad64269944692f8ccdcefd8420cb77d0ca0c418f3c9e9e23646c88c23414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67780 Malicious code in disastrous-aquamarine-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccef3feaa0399327be4eb1abb8661edd4f5910272acfadbceee5a3bb2b59a7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-sambel87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18ebc1ece91f567fbc04e9edc4b5ac488ded081446bcaf29da692af54f3e5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65881 Malicious code in vera-getas1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2b4a2f11f669b5e42fd093dffb1005950854f4234f074ce2ec55173de60377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...