MAL-2025-71651 Malicious code in written-orange-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7da59d6418c8202629ed2e75af9d079847539741f76c3cd6fdf1eaff0da951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-scarlet-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19268117ba07232f52890a4c8a77b60d4aeaf8e7d94e5e2249e7640b8b9edec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66828 Malicious code in architectural-amber-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3c4922ddab471e92af2261755b2e1bbddc262341b28daafb2df2bb08051327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69203 Malicious code in logical-salmon-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaeb249b01cb478f61481085479b8c66e3267133769da4f068a7945b2aec58f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71734 Malicious code in yodelling-plum-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c03d678403fd871a5ac204f1d2fcd78275fbded92d3aceea99abe3cb950024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67047 Malicious code in brave-green-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b58ad63acab6c201c425758f386bcdf1f5f7fd96a2f0da7496174552962352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale-tomato-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af5a4395a55228f60b49a519f5cc020a7bb94cc3e7f0e16c90c99f0ceed93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68875 Malicious code in industrial-ivory-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f4091b09dd34c2f660257e6736992d2586737212b3178e8e0419ab6aa3be66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual-blush-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b69a002cc147342a2bc58de02f2cdebeb89b7517c6f5fd1cf07593e18a4aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-emerald-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee452ac1283fcc3857be723197277f26a4c668ed4084910c0a1b646b9a8d61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69241 Malicious code in lutfhiichwan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15abafc47b11e84479382fbc160b2f7ceecc705d2aede60b6a0a43f0dd39a09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69877 Malicious code in personal-orange-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91befdc951bcb3865524374debbbc76f2c41a9814a391f4188d4fb38ea4ad31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-aqua-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd1876d529ec552b1ebb4c7abfe849f5d6db0661c5ffaec46d7a16e66609ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69848 Malicious code in payable-salmon-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7536737b1f08db227ce6ea8fab6eedc8ca99ab4f17b0ec66f0d9a051ea550e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic-ivory-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410a155785bb0c8fe3d5b52615db7ac4aa03c24cb097a41a5a0697046c99e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amaranth-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1294a944e54ed5aa67c36b18af359324b140f69b8f411f1fea3d3aae1f03f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68952 Malicious code in interesting-jade-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b619ad93b0c370c1389bb194e4abab739d4c81c28a849bdbc0a4710c6a97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66727 Malicious code in alive-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e7d433927058e89b625011173b651f49b00420c6ab3784c5548eac5ba84b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68680 Malicious code in hissing-lavender-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79df1cfea5562b4a57edb15585fbb029b5f3aa89ca096e75f9f493757dadfc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70439 Malicious code in ruling-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46dcc80ef31cf47c1f96d0ed43757aa11369292da1f79f93e658eae25a82cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...