MAL-2025-68913 Malicious code in inquisitive-red-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600e16d8fbd1a9e51d445bbc9310b77616af11f1aacef821543ea418cf52f782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70787 Malicious code in spontaneous-peach-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9fd0c9a4dbd3ded428b49a9d5f6a6567266d4e4f2a46d8a09b1b41fbf48c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70997 Malicious code in surrounding-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f50e6ab0fb53662f4acfde859c15c63d52942230aaf07124a28d5deee928d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67567 Malicious code in crude-crimson-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56a83998f73b5fbdc78bc3e0d4816516eed5a4f7a088ef1a3e368c127bf8d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66813 Malicious code in applicable-amber-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07d8387f77dcdcc6e6bc9586eb3434fa69ca5fa6f36b17c897361e31c7e9235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68165 Malicious code in exotic-jade-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc326f863ae1b00cdec8fd7a9a02ca242c7798579274c0140ddd89e9c2ef420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68181 Malicious code in experimental-tomato-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5b06d8dcff378015c73659cb952f6dea397f45f610c13eb7926022af864a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68985 Malicious code in irrelevant-purple-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9094eef05831dacf10c16c8d81ed68167ff9167611d072d0d3580b197a598bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67467 Malicious code in convenient-brown-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449e7f8ebfaa4f99516b3be1578cf12647901f7a5aaf44428432ed3a360268fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled-coffee-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0102affe747c2e886ce1f8b8fa7373f63f3d6a82d406893a51162861a226a7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-purple-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653b4b90182dbb8afea8ba5945a1a93986f37217edb0ac46346a825dd9345dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel-moccasin-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b27c12fca7b06d3f0dac586cc4b7f3bd3c00a84680ea6ceadaeaf0c52c7b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet-azure-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af537ca438726f486a4a50281c92a6fa4e5da8f62c107f27a4b5c14c1bd7a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-peach-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b144ab48cc3501101c05b9716d33f48569d9217a3408767488c15dcd8dd28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic-plum-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4bf09b8fd3cb03fbb2b496ddbf67af977706ea4d63541407482a8390615c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-plum-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1c8b46cfe49c178ffd912c6eeb77e4fba9f5b37af138c4b61843a951ce4bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential-copper-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6553e3185c461d94f9d1823461fa82e2d8b2362e7d8930a215129499550d7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc30e1022519c899a67877ec078a99646e1cb24196c99f9a17773a9e7f3240e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing-violet-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270b712d55bd8079f4dcedb5f05af8be3fd8e84d60b8108b5e8c54e1ee698b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-tan-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1064e072c836f679621ff8ddd2998f854114f8b7d997a50cb917790fc9489c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...