MAL-2025-70412 Malicious code in romantic-amber-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35317c42a641793ae48bffcf4a0c0758d3b57d63a496ccf56ebb2fce28200184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67008 Malicious code in blusace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed7cce2a7af438e4dc1270f790f4adaa7d78d478c23a4134925aa4ca1a31c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68548 Malicious code in glorious-aquamarine-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3199eb1102e7cdc6644a53af53841abdafbd88403f0b306755c2662060482348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68749 Malicious code in husky-black-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703969d724266c1c2e27cd1be110b145d8808f632351063d18459c49668e1bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68052 Malicious code in entire-yellow-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e111aedc2918f7901657c91bae8032029f0eb2bd54bb00a6b15543b06e6816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66662 Malicious code in administrative-white-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87136ec27d61d3b0b5f640919aea35852b1a9fda1fd0fefb46d5079ced9ee07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69519 Malicious code in mysterious-beige-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3147f255ade3d4f2310ed807661e33b84f6b7769b6be41647e1f7edb19e5a294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70776 Malicious code in splendid-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c441cce8c8559a6c47928ed6b8c23d21c1746c6c982dd2f2781c7c7374cb9ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69091 Malicious code in legal-amaranth-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807c3d4f6c6336eb04d9103aa21dfbd51de91ed269d65c36db373648109fc66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-amethyst-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e1d1c33b23e264a94e5e57b411e64e7f36daf1ff1b59f0f11d3f07653116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-magenta-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a709c7f57027d6ae92987b6c8832bceaabbbddad725e86cf3764fb1d0af846f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clinical-rose-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70df7f0d30c42570d2f3365cdb769d011e93d24dad89dfb18ccdeee5b89826ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent-salmon-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c208690ce22f7cf92267112eee5bf1b40d0bb0c5617939a887aa078091a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remaining-magenta-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273ab09e55bbfbb660f01f3356f45c419d280239db7dc6cd7898fc7f8b3f2fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying-bronze-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741fbf9a34b3a354dc8853457d35879fe85213b120726775a3ca71780b3e6b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed-coral-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d511d276f2fea7ad533e4dff88d50cff9cfd1c88aa897489f8ad2393da2852f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden-tomato-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe8f40d5f2624bf92a3ecd8752e0a9f1a4e84f81261b88e7ccc4bda4647c4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-tomato-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020d7d775f5a616c9004b03d2b538e77c7c20b191d02105b3c28af959c6102e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intimate-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77857f073e5fff3e6d2fcf8597e348c4e978cbda748d26807ad309edbed9e09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-tomato-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c678e4a86a81571eeaabb315abb47f4340aa6a66865529ab041921fe6ff0753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...