MAL-2025-71451 Malicious code in victorious-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e12dec832fd2f802215448ed9ae329a228a61f59c2cdb06c6d4b82fea56046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69353 Malicious code in medieval-moccasin-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0514163e90cbf962ea78b0d785549a792d381912b7765ce0b6fe924344acf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67139 Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69520 Malicious code in mysterious-orange-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b129ef1e207cee0ca2d6915a1df8132eb8309c02f17758f1080dc766e565ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66985 Malicious code in blank-harlequin-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4ba85309dbaae23d0b6ec75e14d0dfc8255801a95ce5fdc28518464b62cd3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71050 Malicious code in tasty-green-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca26a3527b4ed9f8d552622389bfb350aebbafe1e1e08a436811e6bdefe51d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67762 Malicious code in diplomatic-maroon-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395e3433b9c2fe3cdc69ece01952861b7a12a9f97fecb15b97aff2ff2136dcd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70557 Malicious code in shaky-aquamarine-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7702dee9be83d87423fee59454f9d89e3800e299f6db8c1d1315677a70c9659e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70643 Malicious code in skibidipap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fe20def72a331ee3bfbdeace05a5624841c9a2e653b236ba15f6e5812e887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67925 Malicious code in easy-aquamarine-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6c18c619cd656688d7ad731fb0fa6cc8f706853a45b7275c8b2890e51b6cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69343 Malicious code in mechanical-amber-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554de5c99469419ad6d655a803d9a3e57afc2b5be95bd4820dd2247592317d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69448 Malicious code in mobile-azure-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252907d652109bd1eac9b329dc3ad731554919249665a5ada5cd72c68d7492c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69482 Malicious code in moral-brown-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41cfa980c20e3a950c12cc9a16b1d5a54bbb573897d922b307be468ce0aea36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial-blush-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74268585cafe04b13ac1648b205bd954184697ca6b99ce1c0cb8268cca0e33af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar-fuchsia-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d7aba963456cc4b9f5d88efb5642ecd04b3b355e17a6bcd60daf55876ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk-salmon-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe27eda792ebcf2691e5ec126afc5621fc251584422ed61760dc7a1186c0f99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare-scarlet-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611a0255c95312e09133347f9f3ea535c17238e701dd561142e4e358f4146329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...