MAL-2025-71236 Malicious code in uncertain-ivory-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a35ca34ab638b5e395973e27cb4d739fd7df296e89afa7a2028b730e19294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68892 Malicious code in inherent-magenta-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73822c8bd215742f1873560a5a3ba9cd90768860fbc0e190c1478311e77034e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69335 Malicious code in mean-tomato-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9757aeb8c3af186297585679201392f9a4d9d6c26e54506e23a79b080df695b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-red-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b99bca911f9c10da4efe6ef0feccd31ff9514dc19d2225f3aa1c92dc95ed125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake-violet-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26ceefd9ce75caa69a260fd1ae7e76c587d10f01b4d9b6deeb6106bab27021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68919 Malicious code in insufficient-jade-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811e8224e7f8bf251481b7386526a1dcc03abd83f30e3e4c891f5f99e37f84c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1204eba7cafa0e4a5fba8172b6d99e52a6665814665456d648b7f9cf723361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71382 Malicious code in useless-tan-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46c3e4bc81f78f8b6eb7108ace98614c5e286271b451a7c377217f587ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70622 Malicious code in silky-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088a26c663c7494dbfde2050790bf881f5cbe6e3b95cce3e7f517dc8ca2669df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-brown-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299a9c72879f97febb2e0e99cfc9672a065dddcdc8bd89c605588b5b75968e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed-scarlet-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4daed6fe16a84ca34f95cb54b40a1019dca03b0b278b4ac4a12fbc86d2e59ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp-green-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f039ccd40a517295f39c888f7e5523847e53c5c5e149530685d1b9f8812570bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny-blue-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87ec6bdf3051233422f3f9a9bfa8e54dd60d0d72d118db95f98f22ac4404a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme-magenta-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15aac3d94a3125b8be4b635a180f67c69b7535f85c22c6a8faab7fcde817e5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic-silver-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021df74e18c3b6a8cdbaa59d60daae25620c6a1c6a0097d2fc0c0a54965bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71270 Malicious code in uneven-ivory-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9bc5532ba22df99a9d344e90feefacf62142233ad3f06cd81ea01a2c14e1d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-olive-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e162885f69090200bb51ff5a9efc5c5efdfb3eff295925b84f8f2df27bb7ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused-chocolate-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433d32e53fae7f694c649da21abbc18c6b40b1f590c1a91258d3b0e07549070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67683 Malicious code in definite-ivory-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c85abb4334bb76955462f9ef922e5b2c0a6983da1cd9dbdf2c19a3de8334acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exceptional-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b100389487fb81dc885eb95b2ef1646f98008ae769bed266eaa9d6dbddd5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...