MAL-2025-68204 Malicious code in exuberant-beige-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85ca739f5f9fe22883278b165fd5bfa2686e4b206fa10f92830ffcb9567568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69353 Malicious code in medieval-moccasin-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0514163e90cbf962ea78b0d785549a792d381912b7765ce0b6fe924344acf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69520 Malicious code in mysterious-orange-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b129ef1e207cee0ca2d6915a1df8132eb8309c02f17758f1080dc766e565ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69482 Malicious code in moral-brown-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41cfa980c20e3a950c12cc9a16b1d5a54bbb573897d922b307be468ce0aea36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70706 Malicious code in soft-jade-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d760d82d6cf5c00e004c217760aac7e00abd68e29199fff3fc9712d4724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71451 Malicious code in victorious-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e12dec832fd2f802215448ed9ae329a228a61f59c2cdb06c6d4b82fea56046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70557 Malicious code in shaky-aquamarine-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7702dee9be83d87423fee59454f9d89e3800e299f6db8c1d1315677a70c9659e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68194 Malicious code in external-beige-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77f5786f8f7f91cc3588dbca2c7e91fdf7560795b9f23f6492a5b437c167591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67762 Malicious code in diplomatic-maroon-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395e3433b9c2fe3cdc69ece01952861b7a12a9f97fecb15b97aff2ff2136dcd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70643 Malicious code in skibidipap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fe20def72a331ee3bfbdeace05a5624841c9a2e653b236ba15f6e5812e887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71050 Malicious code in tasty-green-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca26a3527b4ed9f8d552622389bfb350aebbafe1e1e08a436811e6bdefe51d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67925 Malicious code in easy-aquamarine-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6c18c619cd656688d7ad731fb0fa6cc8f706853a45b7275c8b2890e51b6cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-lavender-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89b456cd94e5833aeccd8fba474787143f53192382517e1040f22997c0967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed-lavender-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288dcdf8a148dcdee2cb43707511bbdcb896bbd1c777066e13c2a22c2703646a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...