MAL-2025-70522 Malicious code in selfish-jade-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b83aec333babbd4dfba9e93006e062bf2688f80417cf854296f45e09545bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71611 Malicious code in witty-purple-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2e3637bd6a8989a2c15031d5e7ea6e5d74ebd45d8e1b5bd430ac48c2d1e259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69378 Malicious code in mid-yellow-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ac26bd419172fb81571be5abf661b03963bbafd3015cfd1a0bad750e94ac0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68189 Malicious code in extended-red-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867e220d17e9c853b5e08a06944e3f06f708834f9575504ff0ab3cb12b1b15c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69216 Malicious code in lost-fuchsia-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efcc411461374df0f45fac1bed1c6051febad3597a4bcee6645d911b1a2ad81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71434 Malicious code in very-copper-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ad46de82c1061354c3d4eb5c5af6eca98a158775db15f8ff4193b00523311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68167 Malicious code in expected-fuchsia-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb6e0368176708c17544b8a0b9c5b8b61a3294e29e8eb6a506cead781e7ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67826 Malicious code in divine-turquoise-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd5fe7a0b3b08c5da63f48da32ac67afa7695ba0b7ccc7f0c12d8012bbd138c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-beige-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b682fe1c87ef8d7196128d9ea28442c17f4745118ab4f7d779d63678b242e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit-chocolate-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ce71a3e2d18f0e12ca86af43879f3fde6721fed61c3aede0ecd42778ed7ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0da06260c022d14d8175c29612d94a8713b63ce540a75934e8d80c6e0a1b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political-beige-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bcccbb54062b8170bb271bd84d90f9ae4e16278a85f581571ace05ffda4ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67168 Malicious code in chief-azure-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5221d5b501b6be1958cc751bab026a9c4e7cbc844867d99f7f6a47f833de9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70689 Malicious code in smart-jade-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d81d73f188506c50c60d95ebc4e8f4c201a38961f852006ae6f90bf769268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-violet-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb0e5abc812d4e5187c82df20ca1e751f2b9d5ed63857a757051bccd157e094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d0a67f7b15f1064e5c279642cc60c40664831ea46b8402babbee020bf09654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-emerald-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f24ed515830fe22175446bd3c7e7a424cee8f1c1c89efbd750428ee238601f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic-olive-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70388f6ed943188b3832e88ade099cb231ed66ff2852991b0d821f0a78e0d2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute-lime-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae3623c6f7abb08313fcf1263bc1cb84a5455f82308f1b62f5a6c3be5a1e2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68452 Malicious code in fun-maroon-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26af88761afc73e2ba0b04877773dc1a295394c637b216673c147f7880e3f104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...