MAL-2025-70349 Malicious code in residential-emerald-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f7b4a24edc164d1781bacad5fbaf36677af93e046b468a5b65adf44f4df87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall-emerald-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7289c16138569650387935cfde003c3311634ce3d7eceb9e18585e647586a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67713 Malicious code in democratic-yellow-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c005a5943e6ff1eadccad65fcdf5aa480d1aa4af5d48890a19f3221f6649f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70631 Malicious code in similar-white-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206529509c3f6e07edd868395ce1bd615fc2b1853d189fded8b7fb940f1db7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70016 Malicious code in prior-aqua-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4193df28f5a164b15ab0fd858e2b01eb05713cea5a4d632b24f70179d65b495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69278 Malicious code in mammoth-amethyst-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c989dd97ef251fea7eca1383f63a26654f75e3bc99d44ac1fe4e59551580ec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striped-scarlet-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a787a63e76d246ed55b83dfaad2a5916c6d804d0c6184ecabe449d0de19425f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational-coffee-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67ac3c0e56dcb91798049a350fce5eebe71a00c3d3908094079d9cfe2c8724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive-amaranth-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9293092e5301404d2f71af5e25b1ad94d9c20f605d37a63ad0070d98d0003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-bronze-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387c6bbcec344d246523eb5045a18982753d70cfdf226e3968e099dd54f66383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69540f883e4a49517c909adbe76e962368b99feefc624758cc456f440bfe3097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative-coral-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b263a9b4ed0aea9432186687952c453f86cf5c615bb120a6eebaeead0232ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66872 Malicious code in attractive-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d342ed90ef9ec6b3167c1f6c6cc32a1afcb6922b8023cceadb2c8ed64c05c7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71083 Malicious code in territorial-aquamarine-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c9180136a44bfed529cd164c5f7c3ce41c7d124597b01a2f962393331152d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71589 Malicious code in wilful-gray-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147898f1426214cd81d9b6a860619d476d6b506afa9cbd24ced16ec055b3ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70993 Malicious code in surprising-orange-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc84769220d1ae0d2715861f7e7261482ca2e088c1949697891fdc3cf4518620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd3b5ebeeb8c62f78a0ddc7b4e5a3a328c3d188ec0b1c35af5fd387e7764eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68969 Malicious code in international-silver-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd92b399824949e720cb1655d6867d711999b0596f4ec133b7d194568b7c5d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68820 Malicious code in improved-red-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5150513588b3d38b2ffd135f84493cb45d600e4449e1f308d36a997fdab58dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...