MAL-2025-70221 Malicious code in realistic-lime-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ef87d9ab3037ec5306e98aa562b06066f5d958ab41dec3b57a9b9f2cdc09ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67403 Malicious code in confident-black-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0b1eb8c01877b952c4fc5f4d0032e88468e8f75f9f234b576d6fb63b7c9e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71167 Malicious code in tough-lime-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853073ffafbb0d4a2a8fd92cafdf1b20bbd0bd6db91b297ad32449677dcafbd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69527 Malicious code in narrow-blue-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1271707ba1fff1cdf4b58258e4f4f122ec45b2468f44ddffd7e95a2cd4b45d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69440 Malicious code in misty-sapphire-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684df63822d4f0415e2189bb1898899590db165fc99f4ffd8574f57e8774d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67939 Malicious code in educational-azure-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd023a0a5eeebe26572304c1559e85e68c60bf58946bb10ac37992aac785c092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal-purple-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b294be845ddc7b5b09f3c360a72a51276be6ba60e8fc84f0bee5af409dec2619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic-amber-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22e2e1db8bd222c9a6e0147fc20af4d7973d1f81b233b5ab0c7d33b3452292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-coral-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b14f8dcc9e07124175c8bb276fe72453bd7e91e5ebdba0bf025642cc5e9ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-orange-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bed840e0a98c6c82c8445f0a7a0e955447706de7a631f3be46923f13ca4691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66746 Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68403 Malicious code in forward-coral-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163e4c6e52845a94770049fbce8c5cd88195435dfc76afdfc3b66decb1a516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69451 Malicious code in mobile-scarlet-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c14a84fb9a6701fdb752cb9e968e7b6bc8dfd4c675729f3b6f7b352c2b3c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69066 Malicious code in late-lavender-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present-violet-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338f3af0c389ae03c52dbf1620250bcd274fccb92b6669044c50071db340f146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male-tan-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5893c029ea553ab732d68cdcec9bba1755fe82e5ec9ebab659a84d4cbbbfa28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic-rose-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f42a19431acabbeaee4b680839cf9c6278311906a82e08ec5882d3b143ed71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural-maroon-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f3f80213b2a5d415b6a95a93c166edd18f8ef8afa677448b349648174126ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad-apricot-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a83631e94411546becd53e752f452403d936cc3442d116709aabcb98f58dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor-green-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983200543d474433cab34d96babec4b386aab468cbb7f7dcc71022b577874fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...