MAL-2025-71183 Malicious code in tremendous-jade-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63a2385372e4ecdbab4226588e0dbbc4646ccf651dc125b6147957e847619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-coral-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b14f8dcc9e07124175c8bb276fe72453bd7e91e5ebdba0bf025642cc5e9ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71160 Malicious code in total-beige-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937791320b2991789e840c2bf698d51500ab692f83b03be91f1513d4a7c63c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66669 Malicious code in advanced-crimson-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5e8773e8927cb2122f5b17a00d0547c6f0a2ef882b0349e46f85fc89c18f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71284 Malicious code in unfortunate-teal-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a4101863f88c1d410705fba8c309ae55a2c7a6adb280f56caeb101c072072d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68525 Malicious code in given-amaranth-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c2d5761d03950ea05f7c85692de994e4d003d1fd15816f8f63ef94e134c26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69190 Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-peach-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db12b3d27d546a3c861f8df02ec38d7d4572c14c66078f890cfd0cf3b3c7375c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-turquoise-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd228d559a82b995a9e6128e1dfcdf41aa5392539db14b9dfa45f998129baf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average-orange-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0954fba9bd267a513ecb8080374cab3f013d749aae05677c8ed0344fc95ef627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-violet-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd2e0cec3761605ecb08a23b6adc458b99a58468dd245abf1aa9f7720dfa597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-azure-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca8fce8f2a4a32feeb5062ac8dcb2db3013d1220a1d8900ac5556164710929e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66846 Malicious code in artificial-purple-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c1cd4c41c1c76f4fcb622f78fbf388d7666158e08d528af5085acdde7953a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69007 Malicious code in jittery-beige-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb31d352bcf3a879c1e158e18a03971a2bc0b7e50bdf29ae3075d67132b6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66609 Malicious code in accepted-gold-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444d310bbf9fa53537a72ee80d09ae2feb5cc7583b0becd2015981c293c5b145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68806 Malicious code in impossible-orange-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae880034a2cb679bef3088915d85f8f10680a68c812e4b367dd6e7346fe30ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70226 Malicious code in realistic-silver-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3e89ed6c830543fa1162c4502ae7d80624973e8e50e2a9db51e2158b96800d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...