MAL-2025-70122 Malicious code in quaint-orange-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e5767635edaffab28783012fb6a59437590bed7753ade9ef21f34f7739b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71284 Malicious code in unfortunate-teal-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a4101863f88c1d410705fba8c309ae55a2c7a6adb280f56caeb101c072072d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68310 Malicious code in feminist-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e2da2261b0094399538ba597ec863f6159895064cea16c397175c7cec2f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67029 Malicious code in boring-apricot-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915debad11356afad3d36d8878311f5bf0e001479d42f904af6cbd01b8c942e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71463 Malicious code in visible-white-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0259b68b8b704b7ccf8ef65ebabf6b7db78840fa9fd3e72ce04b66d9388b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68635 Malicious code in handsome-lime-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323bce7e95771abd60e13cea52b545c7b18228480d10622d52cfa32defcc141a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-crimson-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e25c58eca5f74cb2ae8d108780cc99d510b1fb1d36c9bcc64d3aea0638dd6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial-white-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b9a60ce0c34f94b22b6cae4c3facd32526adcb37f614221ef15f905a86dd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-rose-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cff6b9b9d5d9dd46811969f837b1f6a70b6edaf991c38da5439ffb4e2700f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-gray-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7d59276750d51d23d9926b45774a427f9e0a6a40d57887b1e4a97f47384fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in majingge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707909bd626332dcff773f54b969f24995ee8e8260b287469d860fce715d47a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged-gold-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0402650951201a0aaf4894790167461efcad02909383f1728e9fad9ee196c864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-chocolate-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac3b4a894eb8773f5f23c9167c0c612cb56738b6472b0cc81fa24d6596dba7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precise-silver-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d42ae136a7c3df3bfb885b292aeba9a87c5cf43e40b8b176bdca6e086e1250e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-yellow-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d335c92c424c0fb20d0ab19aa67affa008f724f8165dd957ede9dd6a3c1b2dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme-blush-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683098a728f81d88616d253833518076ca39d2482f84fff32d02f8f677e2eab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...