MAL-2025-68833 Malicious code in inappropriate-silver-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70674 Malicious code in slippery-tan-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cf977953edebe764a9dbf7b172bb7f0714b2342b1ef513f04926f7f4f872d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69661 Malicious code in nursing-crimson-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5aa9e2681e18d7906044b91819dddaede9910b1d4380330fc9626f5d915f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67720 Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71160 Malicious code in total-beige-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937791320b2991789e840c2bf698d51500ab692f83b03be91f1513d4a7c63c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68026 Malicious code in enchanting-turquoise-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234689944a502e4eb3cf26411ab53ac99f308dec1f3514248a40c224dddd3164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67509 Malicious code in corresponding-brown-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140f0f0b23309eaa3c89c6004f5dc95eaaa443a55993c18be267de7ea1cf8a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful-teal-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f5e59f27e3e6268d2e1001bdf3017c3c196cf5eaf367f278ea6dbd5a1223a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid-orange-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4318b5396edf0efe3232597772662834928726d714f4bc279015987863ccf387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny-sapphire-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4bba724f794326ba7b3441fbf803117eff52b122a0a6c52b0c1a0fbfacc5e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-yellow-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b89b61443160c4cc154547db284d2e071836223c8826dfbae83551e2c4f2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-tomato-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb12089303b6314dbdfe10ada149e0a17d27ec84259aa9ebc7ad9cd54af1c86c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-gold-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93186d6beaaedf183c381e086d35a7a979389e9422dc8bf83d60ea79c721f200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful-orange-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e3e2587944678e99a095725bcd100a9122b8c5ac448a68e78573c715a21bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme-blush-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683098a728f81d88616d253833518076ca39d2482f84fff32d02f8f677e2eab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-harlequin-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cea9ed72a0e945877f24baaed2ad44e65f6b4d20233354a5cbc890ee1be10a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...