MAL-2025-68623 Malicious code in guilty-scarlet-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df2487f398a89ad3fbb1916852ee40829597b96a89a2613daab3d90d877f12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71211 Malicious code in ugly-fuchsia-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aef1df003ec4fc2ffb0c9b61c6032f27a58e03dca395481210453e93309853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67123 Malicious code in cautious-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb927e3912bedd6129b6e72b1c39e04eee32126566e8274b0822ae83946c7b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71579 Malicious code in widespread-fuchsia-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf22587d909dd7eed54f60f84bfcd5b1ab262cc2a0607cd4db261497456e76ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68542 Malicious code in global-blush-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7980ce48ffd49bb684d6f7fdb930918659a0c76edb972baa5c01fc49b7630c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70649 Malicious code in skinny-jade-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414886d8f2d9e4a3c107c7603642138a6dd93e6cc3641619d681d25197a97b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69684 Malicious code in obvious-brown-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6957fd786147a069d5e324d7b9091481ed384cdb8bf3871dcdaa2d7e59fff5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71045 Malicious code in tasteless-coffee-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c528b17efefce5e949e95d4f64236255a17876de0144cc4f7f337e81d4141f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71047 Malicious code in tasteless-purple-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821a55c7da4d01c23cd7d6433604b7609fcb95183146bb7436d369528e09e276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71318 Malicious code in unknown-coffee-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080e2572a8feba244ecf632934ee45b0e8cce29cd999eab4cc99a14748074874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70526 Malicious code in senior-blue-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3db2a55e0b9720e975f0e8d363ce90f686e5c6926b2651fe4819d11a041e22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivacious-harlequin-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831b5de2e9e7abc01224fd588df7e23941dc986f7e24a44b16493dd7306f29a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-olive-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2936099ca0f61c01b1d2fd8bd16edc72c5a4aa64bb3f78065ffcff5c00239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-apricot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d82c0730350dacc8680a8a79e5e68bb12591a1410498ecfbaf67ab21973890be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen-amethyst-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93c259828c218b61f82db885de7674068fec1232ca5e57820193809dff04c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-scarlet-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f579405582de98dedff841b6645080181a2c9a4cc838b12c9401f937f45c2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statistical-harlequin-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c59b30b52915ac400f2c78e3e78ca9e2ff6bbb0ece5956fe55b843574f16b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappiest-tan-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a368300e9c1a555e2d57135d7d847936ded967fbe5725cd51c1dd659ec97681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar-red-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a460e84ddf21daa310e9bc42e23b6ab828b8a6f8f1c686e77fb4360b2d0c7c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-moccasin-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6a85905b3fb3ecf092d986a7cfa94fb7d196fc9f48549c7010104105511ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...