MAL-2025-70088 Malicious code in psychiatric-blue-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c0703a818e5da695e0901e3026da9cdaac04dd0ae636e3bcca56dc9d639258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69680 Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66592 Malicious code in abstract-tomato-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5f55a6c2242fcae8f7e9c33d86bdbe00fa0c458c86877ea1e8edaf4151858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69397 Malicious code in military-scarlet-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869fc299658965637f7e4173b79e60480ee77d3954cd2f1e49041f1c6de4991f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71610 Malicious code in witty-coral-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe79fee1442224d1cdfe1f703fb417ed93335d0c2288732ec83a64173fd1acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70019 Malicious code in prior-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9d691386da07ae5e78ca6a01edeb6a837a1ea790d4948b4fc32103b12e7088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66563 Malicious code in @bipyruss/nebulanomad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db67568dce6e7268c338052b70b603f10c69363ea9972f8e3a08ad824abcdff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70546 Malicious code in severe-lavender-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a28600d212e6aebd7404ed287bf4e9d6b829f9d0806200fa0a347310989478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68369 Malicious code in fluttering-tomato-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1716607ab59656a89672f4586ee36cc56939dd82ba9beb0165456cd3e50ee9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70259 Malicious code in registered-magenta-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbe99cc750fac6d8c04139fc317efb47e14760aa6abdf994f70f6cd9b1642dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69785 Malicious code in outside-blush-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb585e2534df279668c244fa648dab02c569261c227ae04ac2de1c83c302b6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-mendoan87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753e192918f05c68afa68f35a1b6a759e547f6bd5151af409b10d7a5132b2f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-lapis72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7a8891885c3b8cd7b8cdb68c000631af4cd390f87205cf723bc7aade47af0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desperate_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fd97e496363a39a21374df5f6cbbb36cef3d099d4981d349ee8f493d7d8217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-soto8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95705211a461f91fa74fc9e0e9323475b8c9b1668bd98706b1377ce95b821286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3114399868734b053109ac221f05281ca7da38319ce520842affc8850ac04dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tempe31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147acfa21942488fa31eca447be4c94c82dc842f1407b0dc5bbc4ae018c3f15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocational_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05e15b92c011fa1729804521afd34a0b002a323d4d7ab24a4b46dd0d9e2da3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-mangut31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a96d154848ebb74123b7085167a33f58e3571d17a24c73ab8b0ec0ca5acaa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...