MAL-2025-66853 Malicious code in ashamed-jade-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc688265c91e65dd89a99b92e92216b0de372d9fb598c72bca5630ad748a61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68262 Malicious code in fast-orange-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d229bd5cfbef33df46f7469bab7e870e3a16c8dcbf3bdcd686a95633bdfbcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69766 Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69577 Malicious code in nearby-amethyst-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2066c0b8d9712c0d2baba8cec7890a63c64ca367b6407a9b4b21d40ddbad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71410 Malicious code in various-fuchsia-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ed5575259c50a50ae03a024a99fd02a81263e72f3dfed04bcdb78c80c7af8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70129 Malicious code in quarrelsome-white-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2242212ce964287e26c6d7d1d186cce4535f06aa0cea1f73d91cfede382c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66896 Malicious code in awake-olive-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817d74beb92ddab99b110fdea62cbf1ec6c09c5f3716da5f36951e161ba8a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67986 Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66678 Malicious code in adverse-violet-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fc910559cbde137106830fb3e84d4c51673cb8af75310343f15590b1caaf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68643 Malicious code in harsh-crimson-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd47c76fc761b49cbbd6613cb18cca3aa62bce7b032f13866b0c33e0059720be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly-amber-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385322906bed517c4beafac56b6e28beedb35f6c43b147ca957db70c03843b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy-peach-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae21e7bd121c436243bdcfdb66735fc3a2eb51032dd2a3d2c8e17d8c524acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct-plum-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8e3549fd4979bd9f4a23fee3554403982811b377bcb743d9ab47c8be88d8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b120a2836ea82ea14eb9049b98c411f50627106ebb1e127581bc24ee38bf03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial-jade-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c99021be28647481aba843d562ba8ffdea3a9ad70c291594ef6615de80bc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving-apricot-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba29cc5a1baf4f3f64c567222d17e488584549c79c6537c5b97a61a67b4af0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady-orange-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68c951e881ded7795eab5e4c2dbdac4dfeee0e5e12a69df49cff0141425af09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-red-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab72e53d125e5a0c8bd798eb40ae7eef406aafa6d6bcf99822dbfc471539deab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-plum-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c805cde7bdb9f1e033275f511995b407a6b06394a291c99be453ee84998034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...