MAL-2025-68763 Malicious code in identical-apricot-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a06cd7093fb4e7948ede8ddca84a403808c0c537e6272c69f13d5641d0746d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67099 Malicious code in busy-bronze-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319d48c23d38d49cb229c8b2b17016be121d4c0add9ce422e41fa9d13226b7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69891 Malicious code in physical-sapphire-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad77ed563c99d336f3278f134c27480c3512faf2127fc6bf8556ee20e3bbb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69763 Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68595 Malicious code in grim-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbad8a54e8e2c7291fd59b975fba5b4fe06f00acb3276aa0cd96d3672fea42f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70315 Malicious code in remarkable-copper-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c3f9d83e5d2d78130d8059de0e25fc272730968b3b8e037bed916038dec3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70407 Malicious code in roasted-tomato-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e177509a34221db84e2de957e265c63eecdf467fbd4afefea2d4ad30bf2659af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70019 Malicious code in prior-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9d691386da07ae5e78ca6a01edeb6a837a1ea790d4948b4fc32103b12e7088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68127 Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66960 Malicious code in big-amber-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6d0edf6126a0426cbdd9428c728cbee561fcc5f789245646a332dcb81c0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70056 Malicious code in prominent-moccasin-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed58e694e074fad1631040ad2bbdb3885a9d18dcaafde0e6f1baaa4405e4da7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-sapphire-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9d71f93226fd1a3713fb3e6bffb5172c666cd3eaf208db62430103d382e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-harlequin-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfc8a1d5caff97f46c2f8d9e3b7b9e0d05430f7d839bdd0f5e7df0c38f2c245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-beige-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd29ab80198d2ba1cb3e5f8010f90b6a7fc90d3cbe3203a16d94c28cc5dc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-red-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eb2bda60ae750343511264b364428d01e75c687fc4ddf562524f6e3bc8f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside-blush-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb585e2534df279668c244fa648dab02c569261c227ae04ac2de1c83c302b6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...