MAL-2025-70551 Malicious code in sexual-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6151914596df3e7fbc5bbb5b6e9bb4d0dd14880e46382f26ea90ab5e15d023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70495 Malicious code in secondary-tomato-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0917210095ffc5c7a3f3afc4f4ca3a895adbbf212de97db28fa3f9a8840470e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666056d8ef425ead474666273198702a7f93de3b691ccd89d49353c9620ca5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right-amethyst-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d99f46a3469d1b9095f1a8e6cfcb287828f7a4685ad00c630a34b39838bcfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely-coffee-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6888b7793daa45c8e25e4ba636ceab1f3442f3e18ac5a06219afc6adc5ff70ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70743 Malicious code in sparkling-apricot-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2731b94183927d512826bf9de6b1d897a9b1dc88db0c252ae7123294f0c1905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-black-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d9acba61372f89fd423c07756c457ecf75d21cf233e9168ef412bc45e36617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical-fuchsia-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1365bbf167165a6c22a6c1825d9db2499713c5970ff1cd39250082c4b122d9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71411 Malicious code in various-gray-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26da1636b7e9b3738adadd3bf8952d5a2203172145261c6dbcb769258349452d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71173 Malicious code in traditional-magenta-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc75ca6e9d18e3be27df8c93b018cec305c635eacb3c737b572c470243b78e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67360 Malicious code in competitive-red-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a7fb88689668264e178b923bcddf2185faaa62a48f93aadbceed344913d820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-olive-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0940f9791e0d7a41a57b3916d05a6362323a0d6e840d65a31ada4a11f4225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70085 Malicious code in provincial-fuchsia-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f438f54ee690541bcd9c04d107d7e3285aaf5496ce2fd5f45611ffd0d6b03c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71418 Malicious code in vast-amaranth-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64734c0e9328fb183586a3c01f34e6422cc78e6042ec4afe7ca88a0d2f61dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68247 Malicious code in far-aquamarine-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715d04bda03e90522eb8d614bb7c398d3dcc6b8cecf44410066c103ac0b58416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67739 Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefdb7df8a9e835c55c6a96f72e5e2117cc03745fbe0abb2273cae32ecaeb8a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kolak42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d4e56b88061da394a229dc0227a0a281eeed99bdab65ac4e0e5e4200083c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-getas64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24654e752b055b0b0c45218aece302ec30e69be060cd18820489e79151efa58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...