MAL-2025-66811 Malicious code in apparent-red-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4e48689350ed839a7be44b24dd5990a0c44640fba72fb621de7d01f98d19b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69520 Malicious code in mysterious-orange-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b129ef1e207cee0ca2d6915a1df8132eb8309c02f17758f1080dc766e565ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67935 Malicious code in economic-fuchsia-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f720be8428b79df093102f82d7d0a100e90f4e14f329b9b4aa61b2ca4700f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71546 Malicious code in welcome-white-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa42b5c9aaa5af0f4fc2a89efb7c94bf0552b379f81d660b6a2672eaab8de035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69066 Malicious code in late-lavender-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67355 Malicious code in compatible-coffee-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deab9a33349ec80f5d9d90c701ecd64b55938c0c69fe0c313400125e2fed7c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69206 Malicious code in long-chocolate-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15aa5297ca5131f550b695fb3064ca96f51fd43ebcbdbf0770eb02678f7d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68836 Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69271 Malicious code in major-red-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eb2bda60ae750343511264b364428d01e75c687fc4ddf562524f6e3bc8f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69835 Malicious code in passing-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faec7ffe192268f38491e412d62c2f6e52c4f1006ebd173f75cb1f7c32f565d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66775 Malicious code in amused-gray-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a4bdcc59360288ca4609014c90b928ee075c1ab06e4daaf9ff377c2e1166a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70677 Malicious code in slow-indigo-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc74d55e9ccd54083d19b6078ceeded471473dabf15d48cf97e2cdb309d7afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66867 Malicious code in atomic-coral-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3070d9ee9cd3d4ec1e60f8fceed90e5e500a86e40836fc881fdc2a9902b5d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69540 Malicious code in national-coffee-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03550e7ca05296bdebe3bd4f88cccff17953059879cc6f7519566358f327c887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69792 Malicious code in overall-coral-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764234f26ee09e5f80c02e91028ba7f033f7b885891809074172c51e93c9d3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70937 Malicious code in sudden-teal-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f03e0dafa2d3a8cbaa9dc92059aaf53c4217ae2229cecbfb301dd106b8bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68849 Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-azure-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926101d7cdab3a580aa8ea8c0fd34596baf09a538a6ca6ab143a73141010693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-lime-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611255abbdb401769fe4735aa9b433d2a53a4ba84154447eec666d2a4ebb8b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...