MAL-2025-69438 Malicious code in misty-brown-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd09feb7a2a579e7b92748f5f775d04c0c7e99faf8a998b625603fd082a4c101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70834 Malicious code in steady-brown-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776a3cfeb48fbf18eb1159f9d79d1f9a688ded670927161158d18d7694b6ce2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69211 Malicious code in loose-gold-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519519f9a713aa049746dd971a5b508bfebcf570ed8feb4ae55fdd31e95b849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71455 Malicious code in violent-fuchsia-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db25d31374f4d7cd8e1ee8295aafff86ae1d10ea05ddb481db1a19409e7c6b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70687 Malicious code in smart-apricot-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9baf09a9bc82617166f5dce478d1ab087dcd8b7f528710657bcd87ffc50a4944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67005 Malicious code in bloody-rose-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da676bcf52118dc04dd94274fe69502a840fa95fd2da3dee1299438027c6f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69136 Malicious code in liable-rose-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79f5add4fbbb81f0fac67bdc4123b3a85a0501852b8807b0f9018bd0f896e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67119 Malicious code in casual-coffee-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627f897b658e833bc5a3a9d9a51bf8c87c26d47856944449af53ee8c6d8b29f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable-turquoise-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49817fd42aa1b0250b1f67928d31cf5c034d49f4caf133b1bac6e5b05217ee7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited-blue-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85176b6f4eac9a75f4a6b045da6f7dae6b156636474453fd5d2dfba40ce06e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70319 Malicious code in remote-azure-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3750d1a0a08d275502ced38fa636a131517f9c0e269ba3f489eee3c9239cb0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten-sapphire-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4702f21c8e85d3e3338244e295e5990ab7e4abd2133f03ae4e33608fa14a8d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-orange-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc84769220d1ae0d2715861f7e7261482ca2e088c1949697891fdc3cf4518620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual-jade-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76dab5d13f3426b441d8e02c6d93f5dc9a472695a87ade9338bc6e77149d65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied-green-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06622dc2abfd1f849e07023eaa792a6080350ffcaeef74789da7eaa699f66886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful-plum-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee904dac3fb36e866359f59d5e33ec412a716ae971766d2a07d44dfbcd9a63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-tan-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660c0e994394f1e75c0a1fcc8dea6a9b594c7d419cba759a45312c9193691fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b93ffe38e8c221307f7d85dc8da59a42246bb16054d6c6ab517b1549ae3695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68587 Malicious code in great-scarlet-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3147b76c5b8aa84e99f2ed0805b71366a5aaf48466f9f629b2e783fdca72e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-blush-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68781f6281ba14853e31d1de5f1bebf9197a7d014acd48deefa8cf5b1c8028f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...