MAL-2025-67330 Malicious code in common-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753faff89b4f300426746bc70b549687722edd1f4875a2baf6da599de95a4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68902 Malicious code in inner-lavender-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0ddda2f402e33cfe8ccb15f7d2c7e831f79bbcf22de964a2dd639f9f64f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70418 Malicious code in rotten-sapphire-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4702f21c8e85d3e3338244e295e5990ab7e4abd2133f03ae4e33608fa14a8d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67533 Malicious code in creepy-gold-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e815b3e92484115c2e4a37decb34b906a9e92c2b5237930ad6b9385ee2702243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66623 Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-amethyst-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2c9db650a85b46fc895fc53ab529c8788b568164b17c32b094fb718bd8aab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad-fuchsia-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807679db298f387cf489cf9dcea6db3d6142d87d356389a29622e7ca9775212a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely-brown-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b70e58c93cd325a4d1b1bceece71b074cca507ddd28eef86b8ceea0db4c23ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb58c3e80a26666679d6185704ce2125ea199ad4d24a56a4a6aef870c4f127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean-apricot-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dba1ca0b854348f73cde18ebc5d9ac69e278932bde2003c431311c8904f0d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70855 Malicious code in stingy-emerald-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de52d267d7aa3fbef245572a0fb170d5f82bfb1b1007e12c2dc260e9af635ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67105 Malicious code in calm-peach-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1404dfa645dbf5b462b477e21674b949932d26571a80996673e5c86e07425d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71170 Malicious code in toxic-brown-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce7de91f2afb07a25d343aec0860daff68bb0bfde5776dd74256d6f6086886e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69131 Malicious code in liable-azure-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a51ab73cc51516bee5be8492e8e1237c26d6025a736db62f351d821619f28c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67785 Malicious code in distant-amethyst-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a68f28b50dd85350a4a6acfad7adf9505286cea6d2defcf6551dc7fd52873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71738 Malicious code in young-copper-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4741b59e16e3882d68713a49d27515c8e9e607fac70c162d594948307bb9c44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67710 Malicious code in demee9g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac540c01d73d5b6c179f6d9cf7046be069294db03be7eb672727c4571ee1cbb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic-teal-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc4be4fb7a9d0a0c2d93426ca7c0eb78c3ad9e4df4f360defeb6ae1059307eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing-lavender-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770fba350a2504de5f74450305cf5fd5c8513cd6e3dc741cab3effa3164431c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...