MAL-2025-68053 Malicious code in entitled-apricot-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f1a1f87eebdcfa71e0d151c7abef90d5d9b501676fa011b5e489452a58ff6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67465 Malicious code in controversial-orange-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebdea4521e4382b775bb2b870bf75429aac7aa0555ba0dbfe8b4a36230a7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68263 Malicious code in fast-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb29ad868a03e9ddb9a0d3cb0c2a305b56894e389f049cf6f3acafb83a9bf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68285 Malicious code in favourable-olive-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1629bfa5aad124c27f6bc0b8ddeb68f69c3283cda5c0c91f70731cd72f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66620 Malicious code in accurate-violet-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b106f09b5e95bfeb75c485d35e31f11efeadf543d53d6ce9660e8b3cf22baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69722 Malicious code in operational-gray-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fb1b6aef8c89983f27b6c0f5469e88d6727aedb8124f92e22351e0edd8973a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71351 Malicious code in upper-harlequin-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4cee288100818251aa89a1f7863a70a4a1aee749de4862c29c60607e969805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71756 Malicious code in yummy-tan-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5185cabb96f550e73a8c0a89645acad905fcd5f859edc4aa0652051859c7fc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67774 Malicious code in disabled-azure-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9b688875b4c9acae2cbc6767ef65a7cb30911bb9d740de8fb51c7dca0efea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71778 Malicious code in zesty-gray-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eae6d36a89a09ca09387838d7e4f30ec40ee4d4a5bf02fcabad6a79f9528bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71531 Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67450 Malicious code in continuing-apricot-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a8d62412e7e262a9f6ba076dc6d37f4f54922879e7656aa0ebea3062d7910f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70816 Malicious code in stale-amaranth-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30865ce88be67ee33e319b70734b0257ec87da34bc8691665a2a89c1ed9a460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68938 Malicious code in intense-amaranth-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a779ab82f1633dd34123a92395483b457a16d7096bf99615b1da53fe3a03a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68686 Malicious code in historical-black-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0eb9d4d6c3cb66e340a4096b02600001636c5820972b399531013583122d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70147 Malicious code in quixotic-maroon-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcfdde605e5eceb76d816c525168a3a47f9034d6b204f43ae17f9e87d93c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71210 Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-keraktelor2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf578ba627faf705334c6deabbeb9ba78e884e2c8675fe31c016f7f5998d0bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-kolak20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd276b1384d6d203825645f44202fd69f22445919446efd1303660df6458745e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...