MAL-2025-70868 Malicious code in strange-blush-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b1147e1dbe42e9219f9faa55cea8fb805b76fa0374f263a0fc42610ca5c249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67067 Malicious code in bright-cyan-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e624eb7541389ca5048b028459307b1e998c0bdcc290fda59e290b5083c63662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68873 Malicious code in industrial-black-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7a3cd036500e2c1ba1c2d1c46c4323b46dff5f713f588dbd44cd90cb0b3042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71485 Malicious code in vivid-maroon-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe53960c2a63562cebe85597ec55651d385b3e574c1869d1584677804caa93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68975 Malicious code in intimate-magenta-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae17079b44effc32e36432a0db0d0c98d21ae6aa32985e55d5dc62d22a807b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69170 Malicious code in linguistic-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459345a400c4fd9e92742b4dfcd73b5e2e48cdaf77ea0ba1cd89ec1a15f6118e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71025 Malicious code in sympathetic-purple-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afa6b056f5a54de4d7c0b0f54d57abafbdd115cac55c46d67b4a595ef26872e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing-lavender-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770fba350a2504de5f74450305cf5fd5c8513cd6e3dc741cab3effa3164431c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy-aquamarine-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff4af257592422027ae97e3cfbeb642bb58e844b34b151b461d62d42f53822d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109b1c1be1d3219174c1c4c5f7b50363aa9be54c7f57bee92854eb55adc1637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vague-ivory-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a98975589d9ff557ab6b2041fe9348b554b9ab09e0af932951a101e9333851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate-turquoise-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeffda9a821fa37ad10d7f94922f124a1e605543b155b53cad023e33f2f950c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple-fuchsia-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4072001002a3c9abc80cae406779c20a6c06ef6b7cf15848bfe90de5743896c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-gray-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6e92931de4d88364229356549d76a67b41493f5ad557e0784ee10628ff430e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban-indigo-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784d4194e14c5e227b363a1a31dbc9d5d7d8a3771309f84a2a51679dbdd76769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69936 Malicious code in positive-harlequin-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35625aa421041c9043fc41eece3d59029e31fb0f67e95340bfc1796befe08393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69756 Malicious code in original-amethyst-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39b544048410f058f36b431b65c7f09ddd1082302da253620ef8b177dfd5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70037 Malicious code in profitable-beige-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98180acef905ba63a8f11b26d933557c47e1099bb9f328c4ffd3663cedbd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68796 Malicious code in imperial-aquamarine-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959a2604b81e71a4f0c58569cc46250c0c5b3656e24fbb9d820a9141cd42916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70492 Malicious code in secondary-gray-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2bb70f9810123e004b0450c741277730a003dfb1052885ba3264abbdc4c185c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...