Malicious code in honest-scarlet-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b405a6485b23b4c9caeaf00f00ea0c3ed6c3ee6b1a0dfe9b8516364b10a2be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-tomato-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7d013ff42ab4a4e44e87d088944494d5f888b9bf86435389cbf795596f7b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb369be696eca3294e5c7bd646b36bedda460ddf2dfc2a325526001a5debe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71217 Malicious code in unable-blue-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93b88bcc31105dc32dbd8f4be13af386c6af50d7872ae0d50f01334f3378964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67892 Malicious code in due-magenta-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d07851735986648d4b300a02275cb3ebaea9f5bac02411cdf730d69f3fe57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66797 Malicious code in anxious-amber-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e86b14680c7e4eadcffdd639dc9bc37261ab04224871f8584409c100a8c6055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70202 Malicious code in rational-turquoise-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56775cfb5adece4334e710df965fb814381038fc05ce66bcbd5e22a7359ee79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70270 Malicious code in related-salmon-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfece147277f66e04227a53d31516d773e79810b9f5e5dead4326db92009ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71596 Malicious code in willowy-peach-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae21e7bd121c436243bdcfdb66735fc3a2eb51032dd2a3d2c8e17d8c524acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70054 Malicious code in prominent-harlequin-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ce62ecf856142c7e1b37b62c3c4983ed88417c7e1830c0ab065e9a1d77c7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69694 Malicious code in occupational-yellow-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d335c92c424c0fb20d0ab19aa67affa008f724f8165dd957ede9dd6a3c1b2dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71126 Malicious code in thoughtful-tan-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d48aa5f2349e5d49b7517e083881afe0fc6bc065b662604c3df8d828396033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68970 Malicious code in intimate-amethyst-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98228dfffccf4c886bf9b3fcded1ccff70a0cdc6d8e32f67e3c7b591cfe68087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in super-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f644503a1707739baad0f1404d052cafe7ed148d6c6397cea8c1f523104ec3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866109d007f0d94f2c8e06e818eb6d4607cac3c8e9f721226d8b8a3303c95664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70473 Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71359 Malicious code in urban-amethyst-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9c293793b422fe36c0be94cc958a24b61003ec5768b3ea694b70238404b1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66743 Malicious code in allied-lime-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f5367f8dbf65e345182207060c2655dbc0ae20fe32e1929f6648d4bac6d834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68506 Malicious code in genetic-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631e2e8ab0e45528fa7a8fcacab0eac1a8d4b787560861ff8e93024076bd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67901 Malicious code in dusty-jade-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4c9b64f2d6f49f51711bb433ada582350b0a007a8065b7183950e9df8a4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...