MAL-2025-68373 Malicious code in flying-indigo-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f984810ce0efa3ccf61187cb191049ae965e66d375b14d2524f1608fcf7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67747 Malicious code in developing-blue-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25667a5a0d4f9f70426c1f01793ed0527c3311c362d25d3a3f2a72fe8717a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71585 Malicious code in wild-fuchsia-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50525f3aeb8b5ce069def9394862038de8253150b232510e7b08c8be61b73be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67090 Malicious code in bumpy-peach-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9086d8a078553ed2fc9ed9c6fa9b20b45c23276c060050b403cc24bec03b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68217 Malicious code in fair-salmon-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e78ace9d2352a0da514059741015645ff8966e951eaaafc211b39a6132dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866109d007f0d94f2c8e06e818eb6d4607cac3c8e9f721226d8b8a3303c95664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69367 Malicious code in mere-beige-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a4bc64185d18d8bac0d364207516154765a58df42258dde0b4a9c1521d6adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70050 Malicious code in progressive-emerald-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb88ae567f1f5b1d4d743205b503cff50b329402341a61b62c76ede00b85d370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67966 Malicious code in elated-plum-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4cc5602110887b833f734dec3a67c46678a8a982b0e607e4434b2d330c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71102 Malicious code in thick-blush-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e7f22ffc7eb1f8bb057285924ccebd99dc41765eadfeb30c0bf751ce37087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67453 Malicious code in continuing-gold-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb7b0345cc33889923925692a77ab6426b9f306c5e8e66bf8da37e7f418eb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68385 Malicious code in foolish-olive-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320d3aa74b61345ad421bc77418c63ff0f1faeafd19c20d21b99f235f205fcb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71172 Malicious code in traditional-lime-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197fceeb751f1f5379e3c8066475620e6b5284b497e91a28ee3def54a7481552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68913 Malicious code in inquisitive-red-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600e16d8fbd1a9e51d445bbc9310b77616af11f1aacef821543ea418cf52f782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69938 Malicious code in positive-scarlet-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d93c4763da42aa36d7ab737d5d0ca6e03d72fedf3b37c7db01b2b4cb6918e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67284 Malicious code in colorful-black-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d5910c0cff95b73f5292666cf0659c144c28813f93dd88dec726a9167567b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66586 Malicious code in absolute-tomato-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc917474b6278dddeff82077e8c62305ed769295750730698a727714569c614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-fuchsia-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b523b11ef7c4e06847961e09f52301c51425feb96dbb9ae49e3ea48e6126d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent-white-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235fa9d8a354ca8e9223a390156368dce547fd4dc40870e237e4d3c118002f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...