MAL-2025-67850 Malicious code in double-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f987dd55772f58325989eab3f896c50cb877ac0627ba36c16bb1e22731b33ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67376 Malicious code in complicated-sapphire-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6106800e1040b6d0bd3035d7fdb86b0f2a6839558d8ad8d54925fff71267ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68396 Malicious code in formidable-red-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64aca1c5f4d6f4b9000cc4868120ee799f2ff28512f8e514d98485b3442179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68857 Malicious code in incredible-aqua-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142d3614849c3a63242c3a617cdb0caed927cc02a8e77de1763ecf08f0fb843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71442 Malicious code in vicarious-chocolate-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a833bead0cc4cf135bf30e46c2d0a69c42d2cce9203d138a1abc50fd9471b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69264 Malicious code in main-olive-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5658bbe8d9f66c130431ca5a7e8dddc5d4eeb4a5fa48889cf325759b36e6f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69041 Malicious code in key-azure-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b720d4a2e1deb969ad0516605b932efa83748b4c017333e143a7b7e49bf2ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69332 Malicious code in maximum-white-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c02c7ac59b593ead2e56fea626acd3c9abdbb47164b3a702aeb4d7ee9fa9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69957 Malicious code in practical-tomato-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2633e7a9d278562971e96f470d33db2791b9ce1f4af3e99d64ec960c8aeab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68009 Malicious code in embarrassed-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb020e40af0d4d4d98a23ac0f24edf4120b4a47b4ec8e83e4b443e6df0eb15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68109 Malicious code in everyday-brown-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e6039268d6e5c444960641d555d544106ccc43478b9dd199dd86c9c2373b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67180 Malicious code in christian-gray-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25467d1a966e081f13043dc2a05d4baf6a81770fb8f190a4eda25f37f22d53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly-aquamarine-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73074c3a1dacb6193609183418ac0620079903ca8e21ec458ebc1b5e325d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-jade-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3ffdf99f319d1d2ea9ac6832d27fb8b84489b9365b2d1c444736d70dab5a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western-lime-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8516386775009d1baf8516242f7415014eaf0f388aff10db5f26dc816f9372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68298 Malicious code in fellow-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b65dfb69fab55d5b92b3c66106faff9a9b92fe6ed6ea8319bf227e93e5a7842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71093 Malicious code in theoretical-gray-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd6588c7e3301e7495a6d472a4a77a5526984265ea3846667cb9a1fe30b7ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69767 Malicious code in outdoor-maroon-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33262368c329847ad0488383264617a4631fe8079c77b6108d09f36d14791168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...