MAL-2025-70557 Malicious code in shaky-aquamarine-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7702dee9be83d87423fee59454f9d89e3800e299f6db8c1d1315677a70c9659e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71451 Malicious code in victorious-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e12dec832fd2f802215448ed9ae329a228a61f59c2cdb06c6d4b82fea56046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar-fuchsia-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d7aba963456cc4b9f5d88efb5642ecd04b3b355e17a6bcd60daf55876ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-rose-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971081b39afd29c32d7a6716ac2150e2a7ec1e30e37f8231b780a3b8c10aa2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-jade-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160156899d54efae165224b9de6a63ad9d79c83010fc660a3dbf1c0b4a779de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65480e409db966d159ab97c3ed2bddde8af21509ac9938ef5431690db97bf69a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living-emerald-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4057aa20b1b48a8d274029c34822eab70d491c684c98e7ecf21c4dffb3fa5561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low-brown-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8af030f7d627b1654918f903fd17f71c90e134d05cb7867eb36f7c2a41007b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67618 Malicious code in dangerous-black-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c0ed07a7b7306bd4ca283dd90784ec9114544a0eed7ab202743cf3bbab2f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67269 Malicious code in cold-salmon-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a821e608160cb4c5b516391a3963900f8884b5b849cba50002d4ae14a481919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69231 Malicious code in loyal-plum-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65f718b4a25b7db41dd144c43bafaca01faaef0b998274b8a210d5485c6b106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70267 Malicious code in regulatory-fuchsia-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2042aa54307128c903d87d2f038cab374b5df3bf6fda5c1e69c22106c4faa8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68808 Malicious code in impressed-bronze-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a2adcb1a0e27872b5e4d3a1a845ca77690608003cdd25bec42db4a61982dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69488 Malicious code in motionless-yellow-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94108fba18e6667c74440fffb0f5ba5dd334ca97bdcbff02fa64eec5bb4818d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71694 Malicious code in yammering-moccasin-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507055da7c75abc3337777fcf537b30ddebb53f40607feea85dbb9030066399d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...