MAL-2025-70783 Malicious code in splendid-turquoise-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34336e1108c9712698d0ab35343583f522678858db27ff6992ab9a346459ed3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68551 Malicious code in glorious-purple-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4266842f1d03beb6e99abed7d38d5df3bd03ef6290dcec009f37c82d55bc979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69211 Malicious code in loose-gold-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519519f9a713aa049746dd971a5b508bfebcf570ed8feb4ae55fdd31e95b849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67656 Malicious code in deep-blush-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a54bc6584864a8f5384df56a8b41493f6e60fd11668bf22be114aa9f77e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69215 Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71679 Malicious code in xenophobic-purple-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece29cfe9a6effd409d6c94fed03cc1a96b85ef5952eccc192f87b574e4d004a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily-plum-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5be62b927e61034377c98b8d0fea17fe89133d437610d0e41e4dbc53b9d2c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulatory-fuchsia-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2042aa54307128c903d87d2f038cab374b5df3bf6fda5c1e69c22106c4faa8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber-ivory-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b502cce52e2a9b8559899bfe3e926ec88418564104d884ebc45fc7f53a07da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-ivory-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3d8824a6923369e54e669ab24fe02a7eb3453cd5493f963db538d0efa37edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western-plum-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eae487bbd398b0598f6abbb8ea61c4513d2e483aa1f77be36f64791d55e85ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zelio88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67270c430dddeaeb13db52dfe0a4274b6626d65af0de3d47dd07986855511bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable-cyan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde09e4f2658c23d35c555d91b777541f2c6a963bc2d9ba3d496c6d004c5924f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered-peach-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b200e1a6b1f519dc3fc5e11b8a8603d69d5acdb796eb85ca368e28e1a9be895c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce-gray-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d38a5c347ee8ad1eec27f8fd38b04da804835f08ca1045d0eb138a247af6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable-lavender-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cc4586f9920b93bdd3083b7d5174b0dcf8923b9bfca00c26bb8466c2fd4336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable-gold-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82371942ad3ef0ebde2ce108d883a379f4e213c7491db54b20623e3d3ab93881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-olive-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e798dbbd72850181ec6ef3befaa8822ef833714948a5bf4ec1d5c588f48ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-salmon-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a10754935eac97ba8410c82ccc851606191e37ab2d9777cbdefe2ec315ed62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...