MAL-2025-71601 Malicious code in wise-aquamarine-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e0318d442682b4cd6d5a00da095a5565383e4c5853f378df88386a4d371664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67453 Malicious code in continuing-gold-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb7b0345cc33889923925692a77ab6426b9f306c5e8e66bf8da37e7f418eb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful-moccasin-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325587fc8f0b49c217a688ec74016e2f287131904dc40c47e4061ada945b7726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw-jade-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df48100b63b6a10a31b3bb452804a4bac6339b2a98c8b47c413c71b25eb6e196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel-olive-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7022ae9589bda855deae44fca7e62e315ed318dc30678bd1508c3fc2c309fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful-bronze-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2e0b7bce9f0af9470f99ec3f850ce0b5506390913ef6f450e042e5087cf57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful-chocolate-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41370443f2a809e5203b0aafec6fbb5f4f07b93cc548469d0b042821d42d7782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing-green-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32323f693e5c1519bbb8ce90485331b0b9312988582fec4074bfd85da592108a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic-crimson-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ea5acc78d34d5ec7e1fe7173639a43079af5ad14ee6f34393648c88c4b4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capitalist-aqua-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1989907969c1757ac41f17d2ffc09e5c6ab1ff0348fa800ab6d839184bf22791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent-teal-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f747d39c6eed2c1f0f58ea7687ff17114f73a16b1b4b16bbc8e11dc51a3e8503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70656 Malicious code in sleepy-chocolate-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97bd92028de35ee43baf50a7843956235e5ad20100b5a5211c3e01beac23f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70682 Malicious code in small-green-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e5e68ce26b59441391645449ea685193e87b947b8b29a8094c04f1f17ccae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69432 Malicious code in missing-lavender-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770fba350a2504de5f74450305cf5fd5c8513cd6e3dc741cab3effa3164431c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71683 Malicious code in xeric-yellow-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84795033e2b4a78c80c80ff6582f8d62489719b8d54383b31cae433b7d3a8f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67758 Malicious code in digital-tan-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640ca506a09c1b77c7bf980edfa675aa4ac5ac8e777a1f0c66412563d6982fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68914 Malicious code in inquisitive-turquoise-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdab2d54e59adf20389857c2a3ebc08e57f8704bf090d7407c02def0ee7fcbe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure-copper-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d6f8d0a81b64f35c2c35f8c6ebd2467b386ab0c6ce862efe8ce63daf9a3b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic-olive-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50e340b32dcb6e0453548725e479c86c30cebc13b67b21b60410c49a9195ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-amaranth-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23317c7ba227f639c734b0558faaa42f0ef2af12bac5753176b0da9db15cc16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...