MAL-2025-70510 Malicious code in selected-beige-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d698fad21e2ffddc32ff28637ba51b451d753a4f506754b49edaba5fc6ef97f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68197 Malicious code in extraordinary-olive-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc311838723124740e2a8476e735e604f7b8caf5e44e63af763927b1263e8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68780 Malicious code in illegal-copper-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4ac9d69a6c861dfd05bd04ecb853c7717052eded60faeef4301bdd2fa226c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68579 Malicious code in grateful-olive-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47864bbe42ee733de6fb4c2b9ad1ff3885f87fa2366d4d3fbf0b804bfbe4e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70350 Malicious code in residential-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8021bc028659f460cf303cbb57879efe8a03c5305fac5e0e863656863ed3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67720 Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6614e89063b0e03d731349443a4252ebf692ab3d3a5d1b21833bf92a570c951a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily-peach-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee4681f7a3e021bea6148a34b4cb7874623c2b066178be151885c1e8c426a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-jade-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3ffdf99f319d1d2ea9ac6832d27fb8b84489b9365b2d1c444736d70dab5a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal-green-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510938070d9a14f3458d5c6caa6e4acac517749dd78d028281014e3977ade2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful-teal-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f5e59f27e3e6268d2e1001bdf3017c3c196cf5eaf367f278ea6dbd5a1223a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic-tan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5bdd0a53a46a559381e306d4ffed89149e0363891a18dc67f4a0de404ed36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70876 Malicious code in strict-brown-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61dd3e308a276e1e2f1aa06aaa8e5dda47941f2df1c81fd01224855ddbb9a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69264 Malicious code in main-olive-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5658bbe8d9f66c130431ca5a7e8dddc5d4eeb4a5fa48889cf325759b36e6f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69319 Malicious code in marxist-sapphire-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41d172ff48b50a0431c37a1a339e1ef59208943f1b42442886c3e9db564cea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68396 Malicious code in formidable-red-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64aca1c5f4d6f4b9000cc4868120ee799f2ff28512f8e514d98485b3442179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd984d619842729b0d26519f5c24f30adfd35b6950d0a2e030cb86675ef5c136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-tomato-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92256dc3156909d031ea8837a0b2eb7df53427375c89c6037d9c504993220e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute-amethyst-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac286d55cc99627ea651ae79b269b3a03ca0900dfc6dcd9719b579f54405922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...