MAL-2025-70043 Malicious code in profound-gray-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbd0fbe549adf9cfbf2db3df1f64377a2540538a34b3a2243167ae9f9d12805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67939 Malicious code in educational-azure-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd023a0a5eeebe26572304c1559e85e68c60bf58946bb10ac37992aac785c092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69451 Malicious code in mobile-scarlet-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c14a84fb9a6701fdb752cb9e968e7b6bc8dfd4c675729f3b6f7b352c2b3c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66947 Malicious code in better-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86a37b8840eadf6ef74ff1d3d364d711427bd0a7c5fc9a52652b12b74e7ea3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71167 Malicious code in tough-lime-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853073ffafbb0d4a2a8fd92cafdf1b20bbd0bd6db91b297ad32449677dcafbd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-orange-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bed840e0a98c6c82c8445f0a7a0e955447706de7a631f3be46923f13ca4691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68901 Malicious code in inner-coffee-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb43827b00821192d87d2a4d4845c49c20d444a2340c9207a68c747d14b9e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69984 Malicious code in prepared-lavender-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad097a7c78c3365b19f5c6c2119ad0ba2ac1d43dfa734457ca5066fcae35453b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69735 Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68403 Malicious code in forward-coral-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163e4c6e52845a94770049fbce8c5cd88195435dfc76afdfc3b66decb1a516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present-violet-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338f3af0c389ae03c52dbf1620250bcd274fccb92b6669044c50071db340f146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male-tan-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5893c029ea553ab732d68cdcec9bba1755fe82e5ec9ebab659a84d4cbbbfa28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic-rose-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f42a19431acabbeaee4b680839cf9c6278311906a82e08ec5882d3b143ed71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural-maroon-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f3f80213b2a5d415b6a95a93c166edd18f8ef8afa677448b349648174126ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad-apricot-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a83631e94411546becd53e752f452403d936cc3442d116709aabcb98f58dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor-green-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983200543d474433cab34d96babec4b386aab468cbb7f7dcc71022b577874fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy-indigo-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41f8572ce03227c17332d5be6fcb4ca0140d75e772c9a24281d613dd3b73170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy-sapphire-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df187e1dfd4aa65c6abd9ae0ed50860dbe1ea3992bda0b28ccb20b94a9a80b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-gold-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8853c5cba4d87649bdd688a55e4521666629cb028433af29f15d83ffd9ab578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-peach-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c484389dc4509b994eddfab5d5653d408d05e3de4d9c978875163980b6a4428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...