MAL-2025-71640 Malicious code in worrying-scarlet-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e49b2de068d81c7be49fdde38e87a5ad6aa8a091b688dc538d5ea41622d9508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70581 Malicious code in sharp-peach-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed8f7bdd28dac7d699d6fd09dd2351d371ce322df0ac941b1941b7588ae0889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-blush-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68781f6281ba14853e31d1de5f1bebf9197a7d014acd48deefa8cf5b1c8028f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied-green-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06622dc2abfd1f849e07023eaa792a6080350ffcaeef74789da7eaa699f66886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable-turquoise-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49817fd42aa1b0250b1f67928d31cf5c034d49f4caf133b1bac6e5b05217ee7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited-blue-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85176b6f4eac9a75f4a6b045da6f7dae6b156636474453fd5d2dfba40ce06e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful-plum-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee904dac3fb36e866359f59d5e33ec412a716ae971766d2a07d44dfbcd9a63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten-sapphire-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4702f21c8e85d3e3338244e295e5990ab7e4abd2133f03ae4e33608fa14a8d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-ivory-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d3a96c0f8e2bf9a3c032b2644c04aa55e31ac0438a42419aef0370e4c5246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-orange-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc84769220d1ae0d2715861f7e7261482ca2e088c1949697891fdc3cf4518620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67414 Malicious code in confused-harlequin-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce4c61db186e410aacd5611d791f8e4dc5a7a4d3f31730bf72ef4358bf726b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68587 Malicious code in great-scarlet-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3147b76c5b8aa84e99f2ed0805b71366a5aaf48466f9f629b2e783fdca72e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual-jade-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76dab5d13f3426b441d8e02c6d93f5dc9a472695a87ade9338bc6e77149d65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70410 Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67652 Malicious code in decisive-orange-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d01f9781e1840dadfecec22f5240e358b4ffd4bd9c1a69c70a77c9680d2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-tan-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660c0e994394f1e75c0a1fcc8dea6a9b594c7d419cba759a45312c9193691fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b93ffe38e8c221307f7d85dc8da59a42246bb16054d6c6ab517b1549ae3695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67481 Malicious code in cooing-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1535b1b6a124b5fbf6bdc30c9f814a430528e3b72f995ed75b88cb9bdcb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70319 Malicious code in remote-azure-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3750d1a0a08d275502ced38fa636a131517f9c0e269ba3f489eee3c9239cb0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70190 Malicious code in raspy-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef129651446b88b9b77a46df5ca19d2ae7fbeccc32edd865b74f41626e7edf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...