MAL-2025-69438 Malicious code in misty-brown-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd09feb7a2a579e7b92748f5f775d04c0c7e99faf8a998b625603fd082a4c101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70144 Malicious code in quietqx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd3d3388386f6abe2deb41e54df9270f8290a6eccd747a368027b7e9d7b6cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69943 Malicious code in possible-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f867f4596ab316b03ddabead61e7acdd383bfdcb7e351b7352b7ee6ce0fe0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable-teal-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1316af5c1cb60200bedab9601f711af00fe8cc03025e2bb6ad8051a8e188dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-magenta-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f07028a9ccb5f65ccbf2c9f075769a86812bb3287abf016d756e4c316cc2456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-violet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22ce9f3e331de55d5e56b36cb03d4947cca10426c7730ca4bf74917311db80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69400 Malicious code in minimal-jade-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208909dc57489802bfe3ea357d9d5a19b7ab3dfe304f9b7b302a83ccec9f9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67514 Malicious code in costly-aquamarine-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3e1f4d73de6d5843349bcf5c321f0cd299a35eadb484b6716e4c8a31d3feb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69355 Malicious code in melodic-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565d2c815c154dde1ea261d49816bbd8e859048378bd83a2c020604c2c7147b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68219 Malicious code in faithful-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb044927b16c6649707b6cb828879fe8e932b0f1fca2aa739cb67fb0f7f049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working-tan-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a790547fbf57d2cba2abc3b9829f3dd2bbccd76d9b2e9e31da420146c96481f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-cyan-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fba4236a94f6fb7d1d0519e962cad339bd4643470c2e721d7cbce8c08a31fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware-coral-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a68e1958cb77777376029a01e978ce5bacc6e734eb6894c3dad660a237249b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71306 Malicious code in united-blush-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9a6095fa00c3e180e7328d85cca782eb474a12ec8c5aa558c8f0f45dbf55e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53932b71f797bc22b1bde0044f33a0d4b5393fa5e6f2050c4655af034dad98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71416 Malicious code in varying-silver-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ba0b3bbeed6858ce4b5ffd4bf8d892460e4f9dc2beca25386dd44029c3c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67382 Malicious code in compulsory-peach-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d7fa32ccacedc188b20b1845c9a223fbca632aab397e19e83210d64eb2a10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675c29e1f9d37f38d0c17e05be0ca6224e6122bae0f494db11ed1c041ecfdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rangi18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cada092cdd6adf2ca5011da61b197b48cfdaeada224ab8187f2e29041fdb136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...