MAL-2025-70001 Malicious code in primary-magenta-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e519a452a28cfa7312d520681af8504b83d6866748976e49b8e9dbc1d7fab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67137 Malicious code in certain-plum-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93541c3718afd1725034bc803bc16c84f81ff6c69c6fc842a7b252895edc5503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68670 Malicious code in hilarious-amber-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cdf7b64b17cd945e91466b61c428f3b83ef6a5d4e0dbc0b16cf87d506edee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68984 Malicious code in irrelevant-plum-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b46b6c9f07a915d1908cb0462ace9edcb6d55dec50eb1ec23e7affc2827a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71190 Malicious code in tricky-purple-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ed620c53c6e65ade0eb4e67460336127245310ef7b5808b09ffdb77a50e7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68882 Malicious code in influential-chocolate-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bb1c35b4c6e9b44adf7a131197be7eeaff564e25b876def5e375f6d6b0ca2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69180 Malicious code in literary-maroon-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b1315c2422c9d9ed0123b474ca1c81e5b9cbd806da2024049eb356f0e6c01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69215 Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69698 Malicious code in odd-white-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a074a66df92ff17af08a6925abb8b3c3db98f6c4a3dbf1b7a22324b00be83370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68551 Malicious code in glorious-purple-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4266842f1d03beb6e99abed7d38d5df3bd03ef6290dcec009f37c82d55bc979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regional-harlequin-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b830dc2b377d25f790291c596360936ad3fdc004df8ef1f75f8c1c205a885b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-emerald-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8950f91d59215f3c6694e5a9c7f1403d26bbb5d739b75dea3327cb78e5d05c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hieuil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67eadbeba75e1135e2ab9236e48fea0a4e93682441de3461cd59e1c06c006fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous-rose-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3381e276f758696642d866fdb4a7cc965371ecaf875f5040896ac2be262e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable-cyan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde09e4f2658c23d35c555d91b777541f2c6a963bc2d9ba3d496c6d004c5924f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered-peach-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b200e1a6b1f519dc3fc5e11b8a8603d69d5acdb796eb85ca368e28e1a9be895c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-olive-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e798dbbd72850181ec6ef3befaa8822ef833714948a5bf4ec1d5c588f48ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ee274d8d379fcb47e73967a3ed7b93d0f3f6febddd5fa80af85eb6da54912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-emerald-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...