MAL-2025-67720 Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71160 Malicious code in total-beige-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937791320b2991789e840c2bf698d51500ab692f83b03be91f1513d4a7c63c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67509 Malicious code in corresponding-brown-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140f0f0b23309eaa3c89c6004f5dc95eaaa443a55993c18be267de7ea1cf8a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68026 Malicious code in enchanting-turquoise-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234689944a502e4eb3cf26411ab53ac99f308dec1f3514248a40c224dddd3164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71284 Malicious code in unfortunate-teal-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a4101863f88c1d410705fba8c309ae55a2c7a6adb280f56caeb101c072072d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68525 Malicious code in given-amaranth-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c2d5761d03950ea05f7c85692de994e4d003d1fd15816f8f63ef94e134c26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68762 Malicious code in icy-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ed23d60a636f5d1d228f2e1c5e8432066e3f629a30d9c9a255b40251301a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69190 Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-gold-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8e0b3411496a20e0e97cda6f62fc961a605e143f27b93a489eed38e5fb63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precise-silver-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d42ae136a7c3df3bfb885b292aeba9a87c5cf43e40b8b176bdca6e086e1250e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-magenta-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a14106672af764805df4c0100e2a19dfa8b7b38b2f66cd2c9fcfca1c8350bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-indigo-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428451e10a9335f52c1ae577a1d6edad3f67a01f6a6ce58a49d07d3e0071ad22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random-ivory-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e37ae6830c8f18657af35e703746010db0db1e2bc081efb08e7b5295b672daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-harlequin-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24349d41d27a776658a4f944d04d06527656810cf583c0c02cd6fb21f3692bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific-gray-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b92284305070bbdb7d108a37a65fc57a17921ca3f12eccf63b98499d84c527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-coffee-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb90ee11df746a438c176d5b5efd0a07a2fb2c575729cd3d52afa6fe844a6e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil-apricot-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4652a58f2e9bbf7fdd18bb1bcd9cdfbc5f544cc85880451345043c9e6fefb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marine-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a138110f729f9bb7630bfd7cc294d29fdf6379de68f3fe99b9e7990d62ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate-sapphire-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ec4b4db9224762149fceb07bc18ce16445721c65af4bd38c48bff1602e98b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...