MAL-2025-71239 Malicious code in unchanged-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac9f6914f933b76e152088b94448fe2f33b87f806ab67acc80a6ab790ebb859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66895 Malicious code in awake-moccasin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73da3a70a32b207227254b2689fb531bbb8ecb0df8b07400310519597b0224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70107 Malicious code in pure-salmon-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69f23996d37bbbda17b7865bbe9e4910c1c1c57c957d4ee9de54f1f1bff4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70721 Malicious code in sore-emerald-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02555be7aaf90a3c7695dfc9f615cbbf75248f8a655cbec860323de736bfeb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66753 Malicious code in alternative-harlequin-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2cc21f403a1333178bedc367a7be27c454ae0e3547b4e5c80fee32e46673b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66643 Malicious code in additional-orange-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20412ac8b48c05ef485d7d12ee5e870cedced47b4e14a6f36aa0b48210eb3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71468 Malicious code in visual-green-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272fac395ed048e4b4912a4bc15bc530d6f90e4f953123d2a78b6515b78bf641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67959 Malicious code in elaborate-green-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3d615271089f87b40b745cc0a9d7104daef9653605a2cd5b1eed8691aeb284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71054 Malicious code in technical-aquamarine-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0b72ccb0206d34fa4a0059ea4ada77ed51b3bae187489d4f0f5fdb584134f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70824 Malicious code in standard-pink-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadb3cc284af7587bb8712587baa3ea36d65984a00c90af6140c257299a240e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70342 Malicious code in resident-aquamarine-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c990d9fb26b1d85f36c3951b427ea6ff2b8cf570a31326196291a2761ea98cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70491 Malicious code in secondary-gold-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125e83ee289fe03534cba2ddf63090296a83ffd003e4297772c2d86ef1c5fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly-salmon-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6155127d3eb66b220fa6303cc603bd32edcf2dff5575338df6f6c333e1893129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful-bronze-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2e0b7bce9f0af9470f99ec3f850ce0b5506390913ef6f450e042e5087cf57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-tomato-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4749a304e5cf0c370e44bd5e048bfa68027b5f3a05515931f48dd69f39646b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clinical-purple-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cc4dcefd643d58cbe886c7c58e2bddda824bef5bb890cdd156a4960ac2fc64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial-orange-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e679c1243b387847e8b9dab20ef639d8415ac0d7f58b8b2711ab4ef09f049a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive-harlequin-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28ab96560978ece7800a09adfa1abc42662f736a969b03afab3e03fc52beaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68051 Malicious code in entire-turquoise-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abeee65aac3ebe3245a70a67839978a130c86bf38c7cfc132988237edc2be49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68930 Malicious code in integrated-aquamarine-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5913c29cf2e31231c14d0b0c91ab4ad4b29f4780155fe5ba3e21d1b69e56f5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...