MAL-2025-69261 Malicious code in main-gray-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac50ae13c089692a427e9a08e58fc637a1d950bc65765ba51b3913a61d50433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71375 Malicious code in useful-moccasin-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325587fc8f0b49c217a688ec74016e2f287131904dc40c47e4061ada945b7726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69838 Malicious code in passive-tan-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9646bf6982d7520b1864edb2c33dc58a6b0b9dd0ce5a06aa7202ada2dbdae718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69314 Malicious code in marvellous-blue-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0689dfbf8f9fab7e7d3efda817e3ab3c6e899b9630bfc64e57b39318404c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67588 Malicious code in curly-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd3cd059baf8d64562f5f2fbe7b79af39c4969c6269227bf48a5c572de137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70130 Malicious code in quarrelsome-yellow-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2357cfb88308df4dc284ddccc76ab81bef6bf187d78d683acf726c6e34f4357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical-apricot-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a06cd7093fb4e7948ede8ddca84a403808c0c537e6272c69f13d5641d0746d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening-rose-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8663bc5037b5a5700974e2fd4832ced2ae701c52be73c19e02b0ca64fabccaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in realistic-sapphire-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1704530b86d449d8f4728e50720cfc4a7ead5b0bf214bf67a05056780feabafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e42f7bb2da584bb623dcfe3deb3d494474369a7511cc67c356e3647c5c6c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-white-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9205c506b06060d964a390a54f5c37a98c42e81697f27ccae973a907fb2ed40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted-peach-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188dc51ab6e738d750a8c1eff7b6b82b1f7c09884980bfb9590d97331e067637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel-amber-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47282046cdffb24543757ceed22797146441dd8dca5d0be6617f39595ce7b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70476 Malicious code in scary-lavender-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1e4ab8212d00cc6d72c26cd8e6862b8b07a2f31f292cb44207f93fa54aeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68920 Malicious code in insufficient-lime-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bacd9ed1fa4593049bcf0b6070a531184af86796a6b38b37f84b1ad6c1b8ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68983 Malicious code in irrelevant-coffee-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c260a20a1236963509af69c32ae15248baf1b30e7984eeac4c28d3cf0ee740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69950 Malicious code in powerful-tan-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50120a95afbd3d8b9c4b2fa1ffbbd580c00dee50bc4f27510986adfeffd6c08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67004 Malicious code in bloody-pink-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ed4003be9e5a6aea885c3e232d10f786af179fc981e8003a601af3f70a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71208 Malicious code in ugliest-green-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7164225fd77f6454cf2b85c921239517b0e369ffff4b7ac3efebe665dd3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...