MAL-2025-67943 Malicious code in eerie-apricot-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47a5f484587a2ac300123d920987c4ffc7b0eebbe4a94bb919d609f79c39eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67987 Malicious code in electrical-bronze-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a0dd581f821493fc661eca481c5265937b9fd0fc37d474dd4e626df56e6a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67683 Malicious code in definite-ivory-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c85abb4334bb76955462f9ef922e5b2c0a6983da1cd9dbdf2c19a3de8334acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69939 Malicious code in positive-tan-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed52a8b5c4943b087cd19e678067eda4ef0dc723c9ee55b40c1c989c92942256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71024 Malicious code in sympathetic-ivory-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410a155785bb0c8fe3d5b52615db7ac4aa03c24cb097a41a5a0697046c99e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69757 Malicious code in original-gold-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72743afea14a8fdcaeea05d149201c7be371c9b0baa8157c1dd64b75d757169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable-aquamarine-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53a741790bbe7fc2fc0f481f043978f77156853c973f9bdbb32c9eb6b8b68c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-gray-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a256918cb2181a2827aa7100afb8b91e32727fae19bdfb877eaedd8d87b8eaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily-turquoise-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a89f7bb083589d66e915fb0656d554e943e56a512dfa8eb063b65eebcff3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious-black-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6775f2f96fd0cdb9c76488da3896123cf7466e8d7399577ba71cd9b23b624b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-crimson-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf7e5f70a3a1dd33a7603be8cb83182735765f7f1179b98bcd402753702493a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser-turquoise-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975e41ce985e02974fbc00a6671cefe7fcb8972a7b5e75d385613da6ced25311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-gray-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4052c1bfce7d299114ecad3210d4be6752fa9885b85999b21c5317f46ba1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental-turquoise-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bea37d9ebdabcb541c0dbd5823ab75a5d1b6ca4d5a398facce1348448c7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended-coral-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc54e2b12f30f42fd8bbb5a1837bfdf37b4e9fc27867a1220e3992dd85f2923b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical-teal-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e15a2bab0050f15594755bb97b89cc4be565e6804caeb8e53340a606a1a233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68197 Malicious code in extraordinary-olive-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc311838723124740e2a8476e735e604f7b8caf5e44e63af763927b1263e8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71445 Malicious code in vicarious-silver-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea0e1027218fe65ffa999cf0bf9ba1bdeac82f3ecf5ced953d7202114bdf54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70350 Malicious code in residential-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8021bc028659f460cf303cbb57879efe8a03c5305fac5e0e863656863ed3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...