MAL-2025-70043 Malicious code in profound-gray-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbd0fbe549adf9cfbf2db3df1f64377a2540538a34b3a2243167ae9f9d12805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69007 Malicious code in jittery-beige-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb31d352bcf3a879c1e158e18a03971a2bc0b7e50bdf29ae3075d67132b6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69467 Malicious code in molecular-brown-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b448461a3079ca298f1e054407940cdeb9842834f1c2b5feb3cddb65219967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66746 Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67175 Malicious code in chosen-indigo-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd0a3ac28e00cc5fd787cf4c358d04675cf3c86acfd4add96ad0c2cdf56d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69451 Malicious code in mobile-scarlet-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c14a84fb9a6701fdb752cb9e968e7b6bc8dfd4c675729f3b6f7b352c2b3c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare-sapphire-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f33c0e881d649709057736137a5f0dbf2712506d8ada57d3135fba41546e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual-maroon-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feb7139dd37eb4220985699b248cf39d78c41250037d13e33376ae4464145f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dbe179b2e68e2538332172aa823d6f5881c05992b72625f43b5269ed12cf42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-rose-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4d4c77a8c91f0d229d4fba71f457026993679a350298256f2c5255a37936c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy-brown-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf79680a940ed58b14556eabebe415f9d11743e4e74f149d43d8a4041c3190e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial-moccasin-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9812b92e831a12bf338ad91013070e88226243c18e3269bb7a4b20836ce2042d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common-turquoise-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d6b5d70b1d40a7a3393633e01077418815979f98db54132469fba9cd26fb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-apricot-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1988c41faf998866faa5bea614364e09fac1bc1ea4196e6abfb676700cdcdd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-apricot-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412629b0158b1602c1c84a6007d27f9e4502a403f63a9894093675d65a6357f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred-turquoise-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f99e8481fcbec84d2db566bf22d6a03861a58572abb656fd8328cd1906265b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67258 Malicious code in coherent-chocolate-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8252d5d1c8d869354d4c2f759483dfe611a63eca1ce6ac61a84f919273768f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69839 Malicious code in passive-white-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28d405b44fc0024fda7b317301a2ab8c701e1c511a8fffe13394e0f039a35cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67195 Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...