MAL-2025-66785 Malicious code in annoyed-green-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf01f40ea9a7fdcf3e7a749d8fff668ef9921171a8c44063fa82db84653bd6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69483 Malicious code in moral-magenta-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bee0fe0256fe983256c6120126b9c0ee350999214a3aaf060ffc88fff448ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69260 Malicious code in main-fuchsia-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b3394a7972fa6f001e533ee6ed1a22f9a8719f5fa46028be013568e4a33de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68818 Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67467 Malicious code in convenient-brown-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449e7f8ebfaa4f99516b3be1578cf12647901f7a5aaf44428432ed3a360268fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71776 Malicious code in zestful-plum-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee904dac3fb36e866359f59d5e33ec412a716ae971766d2a07d44dfbcd9a63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67583 Malicious code in cultural-gray-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc25dae8660556d4c4908cc03cfb116df7a8f3903e88b953d2a5ddce0c5da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel-moccasin-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b27c12fca7b06d3f0dac586cc4b7f3bd3c00a84680ea6ceadaeaf0c52c7b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-plum-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1c8b46cfe49c178ffd912c6eeb77e4fba9f5b37af138c4b61843a951ce4bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous-peach-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b82c310b25a4f536745c8e6396513f220f2c3582b3324c0d47b16f7ac4004e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic-plum-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4bf09b8fd3cb03fbb2b496ddbf67af977706ea4d63541407482a8390615c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4dfe87855174c088a2ec87c7aed327e66b191959562392664b638e573101948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty-fuchsia-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fe93b7b1b5e4dc65b826a1339fd35f8db6517b05d35ba351d3c4155abd5cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct-aqua-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226b422317ce0cebbebe29a8b64dee113a5d4ed8f6172cbfa31751f75b8eea17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-tan-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1064e072c836f679621ff8ddd2998f854114f8b7d997a50cb917790fc9489c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled-coffee-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0102affe747c2e886ce1f8b8fa7373f63f3d6a82d406893a51162861a226a7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential-copper-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6553e3185c461d94f9d1823461fa82e2d8b2362e7d8930a215129499550d7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advanced-aqua-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7968dc8bed39f9d697c80f40ce35c10533b0c1eb0a4252a08781e7d2014f46dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-maroon-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d83643c70c2b19f86630b0db68da5a2e18acffad54594b2feb58a696a5f866f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...