MAL-2025-68431 Malicious code in fresh-copper-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b619341e5dc5be2885300fd576f35bedc8034d74eaa45f36efdbc33b61c2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69479 Malicious code in monthly-salmon-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebbef619ca17a4e595a1f2a7b7ac82288ef753032796d06a4e1936af66be667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70184 Malicious code in rapid-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2f75a762e444732be5572f2bee39c7031cb938e8169b6d4ef94f7a11b4618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67625 Malicious code in dark-white-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c30acaccf558a368a74d8bdc56a6db049738d14ac573d6ece785be774e0936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radical-tomato-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da76dee4fd0a8aadb960e14feaf6e22b39d4564ea2685ae9353b5a9100e6eb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting-lime-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6354984ad4e358c6ac622237cd826a5dffd1ef5cb490323c749a6908fdc3e8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df27d46ca3177cccbe591878f31fe3c364af698a20a8dc42dfb933dfd30405f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in estimated-copper-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e090fced1bc3b2148f98e8582bae050046128dd03886782a78e9bc7c74ecaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful-black-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ae53f2eb52578199cbf8d0beb90794928f64f8f4236e86598d647de3d1d59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1ffec13a2a5e1b78d05b89f5ac3da1731a83cd3a6cba3be626a6c5728d4a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71161 Malicious code in total-coffee-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd1c1d6e2fca9efb9b05550bd0f88fbb619cca53db38211f406a3308b24a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68334 Malicious code in fine-tomato-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe96c8d132af9d99d52963752b9121f72311ed0a275fbfb8b571cc34c1adee34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70484 Malicious code in scornful-aquamarine-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36e99d51dc1724b07a561b9a7c3855a99554019830b1ebd50713f63709105ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70564 Malicious code in shaky-salmon-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26238dcc9fbe4732586676036dffcf23aeb8ec69ee779719f0d66383bd3eb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70914 Malicious code in subsequent-red-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a419aed2bbeca6a6c51e2e5bdb123dd5c3230b813e7ff4f8df85e58474ddfdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68807 Malicious code in impressed-blue-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3aba3302bc2eb936cb3c7ed64313b887259911d9510136bbaaf2eafb8d04c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68923 Malicious code in intact-amber-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665b15f9b06df8b1a5bf72eb18d44df10b157a976c3f6e8151c4b0ce71295a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67364 Malicious code in complete-blush-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aed78f35a70414a461899bc1a1e0d81bd66ad02adac8a6307adb1c2d8c6342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71059 Malicious code in technical-silver-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02d4bde4bce8d10237bd3c6e1c07f575463ad9e3e76d2c475daa33451864730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...