MAL-2025-70811 Malicious code in squealing-rose-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22d5da30b3afb7b6ad8d0a0e9914c5a5dfc04c4a0c3ca13f56451a5264efd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70934 Malicious code in successive-pink-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3a3c6d75d224d399e240ea3c9d9d44184a20cc948e8bef9114c02046814c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68031 Malicious code in encouraging-jade-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3855588abeee0b80efea6e76e6e3a8583722f7923a890fa05600cfe39a22cd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68002 Malicious code in eligible-jade-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ab60d2e51f39e39af88f544c6031f1b716a21c782a5f2878ee5980dd5d8d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70578 Malicious code in sharp-blue-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e491289e9e993777324d98d6e54f16641c3a614a43121e78fe653bc686f71f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67239 Malicious code in closed-purple-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8001a2f8c8643e40d83c12deaee15c50e6916c9e290deac210fcc58027c98704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66723 Malicious code in alexandaqe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35fc00a9a2503289b8d425fcb158f974fce1ece76fe61c984a7950ce9d27810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-gray-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207d197632e8546f7623e57c730878ac33c936aa5144bb8dec19af81652339d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough-brown-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65eadd0dc03c7cfb53d379280bfc37690748319b29fadb5f944aac41fc8dc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless-ivory-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c076ce1f3ed7ab09274e3630928c51d4cf51ac9c1f23a6f73e5a8e95408601a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d1a7d1262342785e60ad468998bdd2775130836041d7a73f933a6226c1ec27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c7cb59724468e345ec22cb0e663c032f176fc9cafc37dbf50353bece2c38ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-jade-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811e8224e7f8bf251481b7386526a1dcc03abd83f30e3e4c891f5f99e37f84c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f848b2d6ada58a0fc49d9c9a07c5f7cda5d384e040db17689bf8be37a2a77ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-peach-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf463ae7b2abb09e1736b2d0c533e373406ce7e8fe3eafa5b09a7e45ed92934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex-gray-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8baf98bab76852457f1d78269a39f08f1dd4201542b66482c2e2d47d934fb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal-tomato-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ab976c0b9202574673bc44e0fc3f22ad40d4903f604b454ad62a04de5c4601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong-tomato-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595c945bf8dd5957883008b286cfabe244fbbfd9474f87330555a6e021d0bc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear-lime-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b5a8b30774d5e900d57f8a0a5bfe64117f5b863926f9340b26ecd6efdf6e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly-gold-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bab8807d09cdf9a0c3f44fc71a071968c90b944b4aad67327c00b6a17092e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...