MAL-2025-71254 Malicious code in underlying-amethyst-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14048e1f37e4654640b531593f1caeaa8ef13f9270568262a1db69ca9935a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71800 Malicious code in zygomorphic-salmon-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d7014dbd4f90503bdb9bf33af112ed58f93c141ef6638cc21197ca59cc042a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70968 Malicious code in supposed-amber-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98632ed83ad3bf64e2cd6d740d0c845522ba792fdbb5c100bb0f8fdc0dc3059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69993 Malicious code in pretty-moccasin-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce515512d0715a335eff1fad4116d7ddb18cae66f468d7d36b5643527ef2150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68608 Malicious code in growing-red-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00a9ca656d7584a2583298f4625312fd2a3ed939e9f10ba24efbbc414365db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69208 Malicious code in long-indigo-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b35e5cc021d783d3cb4f381408da3792646ffab818335bff0a77195a8e47a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67345 Malicious code in compact-tan-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb1318ab14f4cc4798fc18728a5a460623690b36a34a54f02571af3c938f06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving-coral-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b00f8b216390e46021cb07dd8affb43bb2288a5cbfc406eba61da44908f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced-salmon-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7d56ad28615d53d8413a5744bc1f078d5a1af32e30ce8b2b178bc94d7cef08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager-amaranth-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7770aa399f96d05ea16996490890b30f48a7271b4761d47a54adb2d5edb1012e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed-rose-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8d148a28901cb484e08db5e81d1fc1591a192462a004b64bc6ecff7ebc63a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-moccasin-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98773a78cd4b85e74c3503f37d4182440027f01241391b3c10f8551cf924dce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent-chocolate-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bc522767b0113718d6040f93f9c4eaa2315b49ab1850566cf12528235795e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-beige-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc563ea8d1faea5faaa6e82fcb084d3be7be93bf34ec73b0787f0a81d8537f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired-beige-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7067f6c3735517fe5151aa62904e8015babd72ad28c006a3b701fafb7fe4222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive-azure-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31aeecad98547796bb475a6aa47c5ff2c76ee3b81911c6fd484c45c992911fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8320738baead6af2bf10b6bfd6c36b7532e84f595b033ea209136bcdae8b1d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-rose-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab01a3d0ac1e583a11caa4f003a308a65807b6569e7e1175cf36e5946a6ab03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected-beige-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d698fad21e2ffddc32ff28637ba51b451d753a4f506754b49edaba5fc6ef97f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...