MAL-2025-70366 Malicious code in resulting-copper-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36175b16f341ad83d6506d14fe384d74ed5c1864ebfd4d7761b72c1c3493792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69855 Malicious code in peaceful-red-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391d5f5a1f26d5f7ea625eb78fafdb2859c3af95619a60b1a328222df491af99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71211 Malicious code in ugly-fuchsia-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aef1df003ec4fc2ffb0c9b61c6032f27a58e03dca395481210453e93309853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm-amaranth-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cd7b441388cdf2f629a286f7aaaa39e770ebc6a590370f010dde29ca9cf705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70526 Malicious code in senior-blue-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3db2a55e0b9720e975f0e8d363ce90f686e5c6926b2651fe4819d11a041e22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67535 Malicious code in creepy-plum-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8baa38f4a48ec820ae22ecaa8b008d55080de34e0981a0ad78fc09d5e322a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident-turquoise-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe891155642e09a144573d907d878f0966acbc4cc6e48c92cb8f9b9f3227a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68542 Malicious code in global-blush-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7980ce48ffd49bb684d6f7fdb930918659a0c76edb972baa5c01fc49b7630c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69440 Malicious code in misty-sapphire-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684df63822d4f0415e2189bb1898899590db165fc99f4ffd8574f57e8774d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69048 Malicious code in kind-beige-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8c6ea8ee89b123c3cc37f8cc867f590cd2faecc593e870a802a369b78d241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-blush-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f96f6408249c74bd44d42a657cf719eaebf4400056e9b75f580611b3a8838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal-azure-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4034eae05303fbaa8ff8798275f35d20d0b04b0fac23847000cc5530741b1040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-moccasin-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab81556d45afdd328b9cb4df3fbf897b7774d028a46e50bda4022dc2ec57a392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible-violet-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ef472878796f8d316298135b7516f147fa2015c1c04d8623a299ea95c8eb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-lavender-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82aa6256ec4e79c8981db54b42b923885226588edac38824f132c7c21a471fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-olive-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e15878eae6d74a65b00733c0347140bc7cbba7a4623c92b81778df51a1d7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8021bc028659f460cf303cbb57879efe8a03c5305fac5e0e863656863ed3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71579 Malicious code in widespread-fuchsia-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf22587d909dd7eed54f60f84bfcd5b1ab262cc2a0607cd4db261497456e76ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68183 Malicious code in explicit-rose-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6ca6f47d6b9e5fd2bc4373752acfe912cf417311c5697b71dd5f4dfbd04a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-blush-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095d55d4b3344ebf673875304db54a02e15c22ac8ec1997be78a8e5a0bb3a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...