MAL-2025-69813 Malicious code in parallel-tomato-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dee76d153cdb3635360c8258f7e0d2fd0c3147fdaaa8b9d36ab7799d18169cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71219 Malicious code in unable-emerald-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4433df00a1a0d7f70f240b5cca8ab6ca0c1d9e7f5ffcb2074a121366cf76ff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69599 Malicious code in neighbouring-silver-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155c08c663c1bcc1ad3b829b564202623efe55692b459425fb619753d0937bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68690 Malicious code in holy-harlequin-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036af5bb09173357d055436d457b8b1957e8d700fac2f600d56b49a5c8e6ddb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71126 Malicious code in thoughtful-tan-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d48aa5f2349e5d49b7517e083881afe0fc6bc065b662604c3df8d828396033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71616 Malicious code in wonderful-gray-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78515120ef92d62fc21017834d629a81d509c4b67a4d00ef50c4a96991e2f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69853 Malicious code in peaceful-emerald-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7d1055238bddf6b8e5c634e55154045af3b768eeecf935844aae03f24759e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70508 Malicious code in select-lavender-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae591d8b12718b5c1b31022d64f8259285cee722fc11710e99468418e93b24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70107 Malicious code in pure-salmon-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69f23996d37bbbda17b7865bbe9e4910c1c1c57c957d4ee9de54f1f1bff4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68163 Malicious code in existing-purple-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6b4be112198f0e21333fcb146b8759831724822f1f94ae72d6fc60283c0d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c341bcdaaed3945acb51c1312b486e22ffa89bfd0169328df8631862d077bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental-silver-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822ebefc26197f54f49d28fa2e2460871a8c1ae30e96167a17c94bd91e4542cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering-scarlet-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2a51590368450df9f59c9135e4919ed57bab14335803398633e958e8087e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby-amber-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24920925b62870689934f00932754a929f1c04386f728ac392843318bd6eb8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped-amber-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74275bb43e600994eba90a00faacd7ece9a298979a3fbd3d186de95ac52e9b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-bronze-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abecec741302c5d59bd6465d89522e11fc804c19ea54f16508eafa900cec3c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonely-blush-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8092f3ff3eb9616f63d445e881a317d28ffd865b0c72f0157cdfe3572c42511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-azure-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca8fce8f2a4a32feeb5062ac8dcb2db3013d1220a1d8900ac5556164710929e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67394 Malicious code in concrete-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2799c119d24251ae3ad925e7fb575fe210a6b1e49f7b0d32a8e79ff5c08d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-amaranth-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f200330347de6690edb8cda654e69b76db589ac0420ba01df4017a4b92808ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...