MAL-2025-70085 Malicious code in provincial-fuchsia-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f438f54ee690541bcd9c04d107d7e3285aaf5496ce2fd5f45611ffd0d6b03c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68247 Malicious code in far-aquamarine-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715d04bda03e90522eb8d614bb7c398d3dcc6b8cecf44410066c103ac0b58416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-orange-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743f3ca96257188850168c051bf1db1488201b22c5c9547e942c34aa6520111e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent-harlequin-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ce62ecf856142c7e1b37b62c3c4983ed88417c7e1830c0ab065e9a1d77c7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-yellow-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537dbe03284c7d8084295d89f227b56d8139b06a2025391f37abf9ea37cc0d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68087 Malicious code in estimated-silver-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d51eda0ec5460a4558fb62fd40d9e007e6ebb8adcc8728b33cdba241dc332b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69460 Malicious code in modern-peach-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c60a346d5b0bd892399ea8aab34dff5d543cadc59e1cd9f08d03bfd80cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70495 Malicious code in secondary-tomato-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0917210095ffc5c7a3f3afc4f4ca3a895adbbf212de97db28fa3f9a8840470e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70743 Malicious code in sparkling-apricot-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2731b94183927d512826bf9de6b1d897a9b1dc88db0c252ae7123294f0c1905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67739 Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67360 Malicious code in competitive-red-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a7fb88689668264e178b923bcddf2185faaa62a48f93aadbceed344913d820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71173 Malicious code in traditional-magenta-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc75ca6e9d18e3be27df8c93b018cec305c635eacb3c737b572c470243b78e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71418 Malicious code in vast-amaranth-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64734c0e9328fb183586a3c01f34e6422cc78e6042ec4afe7ca88a0d2f61dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71357 Malicious code in uptight-maroon-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed3a2c51170349d30100d11f306aef82e7f1bcd625843e5f8c1f6f5429afb7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71411 Malicious code in various-gray-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26da1636b7e9b3738adadd3bf8952d5a2203172145261c6dbcb769258349452d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70061 Malicious code in promising-beige-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9eeb0c4846b89701c98be52ccfb9503a96dd3c76af465d90dd3bebd58b9b561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored-tan-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f75aaa18f93d307754913a0231665bd25436ae1d9674242873f10bb395dbe4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-getas64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24654e752b055b0b0c45218aece302ec30e69be060cd18820489e79151efa58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-sambel4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92637e26da811fd20cc9097c7e0437099ded8030673208029969ae3752f5264f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-tek28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6efd780977ae759e88cb78d1ee8b61fccbf30f1d02ef858e69641cfd3e5bd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...