MAL-2025-66869 Malicious code in atomic-scarlet-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74b15ad2ec416cd71e77d02094929a9f12b4c3f5043985d4534327b63530dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68864 Malicious code in indirect-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db24658869bffa4aca5f30e0c966494b08ba4606ecca9938b1d10b785a953393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69126 Malicious code in lexical-crimson-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1130972238df5559e663a88c0bf242a0a71cb718305cd4be0e67e110a84611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68851 Malicious code in increasing-harlequin-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e0e3ea278465aa8e44dfeab051e3e5237a98da96b0428869d4038ccfbd172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70106 Malicious code in pure-crimson-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8b29662afa68a35d4ebaf415ebda6907220b0d7139e5bee491f6b3e6d80fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70510 Malicious code in selected-beige-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d698fad21e2ffddc32ff28637ba51b451d753a4f506754b49edaba5fc6ef97f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67028 Malicious code in bored-tan-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f75aaa18f93d307754913a0231665bd25436ae1d9674242873f10bb395dbe4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71123 Malicious code in thoughtful-cyan-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94311306cab5c29716fdbf97c6cc774fd21b4f3b108a080b98f67279e6f357dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71626 Malicious code in working-green-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3068ffa3f2db4309647cd36cb75cce7a4ca2523fe07cf7bdf8057ce0923a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69856 Malicious code in peculiar-amber-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa0c652dd015072847a6a59bc198a8aab719d51a8020d8a47eabfcd416dc155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in robust-tomato-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5c2a0406505da20a9080fc73ba27400f717bdbe2f01d702fa768a7271f02a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuclear-cyan-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa32e8c338373ec53422b37da9b5c3c3478e171d678442cdf50f7fad4975ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy-rose-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36b2f8879c9e35102e6927f0666f5cb449516fa714b607c068f964f0062a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary-amethyst-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4007d6cbaa7e43548701b7e128d540ba96d7ab7cd33cccd28a96c4d69fdfef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable-plum-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac83677b829a48b2eea56dc83c8234539fe8cb2c5de8cc8e6c1f606ec8496f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-copper-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d19612d963cde1e745732f0bce077c191b1406ebdc0270f63710f8dc1ece886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-gold-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming-chocolate-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd569c06bdcb96fc2ddb9d63677ea1b92ad46942386b3dfbf80799b1dc9397d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy-turquoise-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4352792955d9fd4e29f6f960e192be61468901db93b715c89c6d57c7746c1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...