MAL-2025-71167 Malicious code in tough-lime-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853073ffafbb0d4a2a8fd92cafdf1b20bbd0bd6db91b297ad32449677dcafbd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68186 Malicious code in extended-coral-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc54e2b12f30f42fd8bbb5a1837bfdf37b4e9fc27867a1220e3992dd85f2923b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70517 Malicious code in selfish-aqua-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc6e56f206041a3f1c069ee091f812ec14369fea9fec65fceb83cebbcc662d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-chocolate-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4d7c57f2144853be7baf855961c310832138026af252cae348511df953ba95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66631 Malicious code in acute-coral-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94ff038c92cee08ecc4449683b44005c35352944afbd96d38351ee85bda4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69947 Malicious code in potential-salmon-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15fb4df96427aaa6fdbfd8268015800afae7244df6ccec2ae7dc55dd615235c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-moccasin-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604fdc9d4bf966bf4befa13ee87f621d5a25ab4d6ba93a3fa15fec7b1a953ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-coffee-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd5d5ebd8bedda2450ed83990ada971f06b2e4a8d099491b89093ed032a7d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67824 Malicious code in divine-orange-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ade43c364fc69160f79d73c2377e60b65c076b3cb976cd1aa7d9760d5d23ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71057 Malicious code in technical-coffee-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f0acfc6132b8528998fb886d4413ce25343580263ed594e66e9ba714bacd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71299 Malicious code in uninterested-green-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da78968ea1f614a9d7ada040b17d45943205fee7b5b8edcbe86927d15ec04e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67920 Malicious code in early-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f794fa3273d5f4b5c7b4674bd9c1b1d29765cbf4d380c4df2e10b73592d04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67254 Malicious code in coastal-blush-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9069b2112afe02d0668abfcbeb067532c74c19d43f71efe6a4e3fb9f7ca94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67359 Malicious code in competent-rose-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c5c41099453d627bee3def3c4f66124b90cd5f048d00d76e8b405ca6b6aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70037 Malicious code in profitable-beige-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98180acef905ba63a8f11b26d933557c47e1099bb9f328c4ffd3663cedbd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lontong69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9795cb85c6851b8736e7d96bc12182feb3d2383bdeb66ee86f78a81728fb5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kemplang66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80e954fb21fb200a2ed68745f8d434fecd46ccd0418528e1a33fd68818fdf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-pecel91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec406734f2fcefd138c5266ce3dba776827a48dbcee7d4a736e86e24edce89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2b292ca93f6234fbfdc60318aaaa3090823c17d74d4d4d97ee92cacac198e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...