MAL-2025-67735 Malicious code in desperate-blush-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62092cde52d6034b8851dc11976ca9afe23683c56a45a346dc5a41eb0f864c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69776 Malicious code in outer-peach-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86106e500d44ded1f27457b227400cf82fc95ed48680fe56df50bfe2e87539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69430 Malicious code in missing-aquamarine-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f8b08d5338e89f4b16d7ad6899d5d38a5a11a812c99dc60669e423bcbdc157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71028 Malicious code in systematic-fuchsia-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0857437b7a75d9f699ecc6586ce55e4a43b6e9c43b19d120e9f1abb4a2d0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70754 Malicious code in specific-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e8981ac8d6dfb6a2c43c9cb57d095b077f25272bdda9aab002af736f9f43e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69307 Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70873 Malicious code in strategic-purple-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d9cb1c80409ece0c1d403cc232d8aa2914f4434243f3204ace25798701b4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial-blue-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3a8ccdb67e777f18827aa626c829b6865f2d47fd4a75badef5eec12a070de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798896058e89d22426398615be741c85c7cd6c1a46b3535a8b5e54cba8b894c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen-green-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5548cd62de942a9f03af0f85a020f8f647b3f0c99c71d79f09e00da0a5dc3948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled-blush-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a8eaddc4ae03719d803c4c7f73963b6bb4e245be4f1160c1e9ccbd0b067799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-azure-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765a1030a03af2740d1f520dfa567b4aa16d0c9d98e8ac7559b47e985f8a9280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b93ffe38e8c221307f7d85dc8da59a42246bb16054d6c6ab517b1549ae3695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-red-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b27e01f7f9c8659bc5760a37693d01949a45ae0d3c2c77d02a37333ebf3952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile-fuchsia-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c1a7b334db7042c929caeec9728b7e850f8f04ad8ce88750f90a9985d33207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic-red-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80a955a95232c01fb125cba918ee9d5f4c17af3b8be062707115fccc8a0a4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in widespread-black-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b386f3cbb2457e9189caf4c3dcca6061f858030939b2287835ff9bcc31ff6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparable-tan-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4241a4fe88b63b681d8b8605692ccf2a8f5e2142c813b6e1b2105d98f51aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist-sapphire-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41d172ff48b50a0431c37a1a339e1ef59208943f1b42442886c3e9db564cea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empirical-aqua-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d5b932bf56517d8470b61ad758e1ae23963b8b991da6ba1ee4283e0be9ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...