MAL-2025-70285 Malicious code in reliable-apricot-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c3a92d08abdb36433508e6d2c82a2efdee26eab1f5515d1df5b9270a142754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy-black-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75456b55f2c232b9481edf00c0d94b87d9d128501ee27065cd3c35a2b0033521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68143 Malicious code in excess-scarlet-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edcfff9a42ef689f9a6b5a4be299c97b62888dc33b25dff91c33d293f986cc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66913 Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69293 Malicious code in manual-lime-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b96ac4c18e4c8d1f8052375b93922ea8222e7aefb1b7bd7047486e686cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70528 Malicious code in senior-ivory-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850e6b550c305f9426a99b785d64b63ce7f5b7797c9191181d641ccb7b585723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70786 Malicious code in spontaneous-black-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e25dbdeb337e2d94d8708d59bb7b6778c66e442d0016b47019e6b512d174b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71161 Malicious code in total-coffee-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd1c1d6e2fca9efb9b05550bd0f88fbb619cca53db38211f406a3308b24a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68807 Malicious code in impressed-blue-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3aba3302bc2eb936cb3c7ed64313b887259911d9510136bbaaf2eafb8d04c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71437 Malicious code in very-indigo-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff22bb932266d634fb2fe73a2044d7fbd1f090c534653fcd23b59035e776fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70203 Malicious code in ratty-coral-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d31823f5c16f933354a3954d875a560f2f383d43fa79fb56ff8a50cf2530696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-coffee-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd5d5ebd8bedda2450ed83990ada971f06b2e4a8d099491b89093ed032a7d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical-amaranth-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095e06499aefe36337976c1899bd5e6f5e0ce548c2e57acb88159fa54a1740c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-chocolate-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc2ce7ac21a2c7abe38211091aefc33be9216ce4f741a9e044c7fdb46b97ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy-plum-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4084b3478ed44e10d6d75f96fcc305cd56aafd384dd35cdfc8cb603af60006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial-silver-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbe18aecb0cf92360defa06b3e836c99505f92e11514c5bd9e54b6da552b6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled-brown-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d96385361db591b23f5c5cd181e3a8f89b8fb7ad062fa586c92928d6c5a83a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-fuchsia-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f39f3857d93359409fa65e271fc63fd5e302393d10e8b6c829d5a4c3ada0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-peach-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699d8093b280fd77e9ab23f5eecb84e83982b414c10e097da67269ec65ee9110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-gray-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84cde693425690af223f70b83f31d6e8fa0b862eaac864ce9695fb7bf9ef2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...