MAL-2025-66753 Malicious code in alternative-harlequin-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2cc21f403a1333178bedc367a7be27c454ae0e3547b4e5c80fee32e46673b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66860 Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68235 Malicious code in famous-aquamarine-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0725abbf8ef50cf834e20056cc79d960e5884cbc25681243a2383f61bba797f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66890 Malicious code in average-magenta-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9e6650658a0be1840a7a67228ae568df9da6f02cfea9aba4fd9eb65e1b5f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71439 Malicious code in very-peach-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8454fadb8b0778147334e2557fc4b7c11085bcbf2b69b00e1b11bf48da85d0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67287 Malicious code in colorful-pink-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0daee748dcbc689f30cae08ab1c8dc7426eeb1bb490394678ce858aa33df1108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67440 Malicious code in continental-amaranth-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ab873b1dca28b41f83cc97ad3dd1217640227e86f74aa457a391bfb37f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71713 Malicious code in yearning-purple-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7303118a01ea0ab3370bf1cc9ca5f91870d4cbd13b6f5d30b7648bbee597cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70616 Malicious code in silent-coffee-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ff3223a62a54a89e678df6f46dd92fccd39ae7d1d69ff9ee5a79efccccd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still-emerald-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b42b0a42a07cc08d54a634d714c74665ff888711343966ebc407bbb30d1edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68251 Malicious code in fascinating-tan-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efaf1b39700249421c25fa74423c4ecfb6c489789f101dee9db15142f1dbbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71584 Malicious code in wild-fuchsia-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def211c66d852174eefd2de3b24a6f80b5b721a45e9dbfc0eb0e5dd01af6c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67942 Malicious code in educational-white-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30e9d30e826f0607a329ce5c07187d1465ffc4c7d10a6028d2c8b25bf2ebd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66848 Malicious code in artistic-moccasin-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd4cfc833d45b2517fccd239f63bfbe643b03f1acff664e11356c1fcefe369b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying-amaranth-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf3bf0546bd4920b14909d9a3dc2aed1af5df59def21c73c98dc885bd788f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-coffee-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bad0075af3e7603746c86b2b4696690b78b8d8e2abafd23efbcf79ec4c301f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69762 Malicious code in other-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896b513c2cb00510aac6d963fc128765f95563c6d1b31fe30ae44e653cee2fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67363 Malicious code in complete-amethyst-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e2f14f5c0013403e13fe337c7dfb38baafeebe6e7bf7bcc98a95f559d52e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71354 Malicious code in upset-magenta-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd465043101730d099d86c31167441fe11423687e0042e3218237f6f57d79bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69270 Malicious code in major-moccasin-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1a954d0fd8f4232efe19c45e9c24fa5f09d089c3fbae09ffa04c7c00a1ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...