MAL-2025-70064 Malicious code in proper-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a281832f582a19431f5da9dd80e9d556c29d4f7c0423f55eb66cfdf7996dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67601 Malicious code in cute-lime-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae3623c6f7abb08313fcf1263bc1cb84a5455f82308f1b62f5a6c3be5a1e2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70448 Malicious code in rural-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a00a22a5963761ed0d5429b8fbb00dd6a8b38115524fdf1280d5a0d062bfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70967 Malicious code in supporting-teal-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d32fd58c04b5f82e0c307f6f35333cceab05967043abbc92616d9ff4134fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67104 Malicious code in calm-peach-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfa8aab3ce401b3098d443a39e25313b00d67c28616431f7e9259ee71de4e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69177 Malicious code in liquid-olive-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c71d90ea9ebbe442a40cede2abdfc14a58cee0d3d5e00b2f6cb8af7a85a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71247 Malicious code in unconscious-rose-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555c5ddd44ad58d670bae4282e95a6199f30752b7e93943ee7506eae120773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67919 Malicious code in early-chocolate-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ac1143dd6370dbd8ad98db4e81c2de4e8e23e48833c7df919a2785145b0a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67887 Malicious code in dual-olive-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc5601580a5baf1be4b7027a94a748da9bfd5c788033fe8be17a9c95cc077ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67200 Malicious code in civil-apricot-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe237b6ccfe4cba6b92ec7baf7522022b3dd6e735ec0386b0da931782ade014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67620 Malicious code in dangerous-crimson-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f921f5bfacc363155a9cad6613aafb56fc70566820a0cb3264a516a16c10a53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70093 Malicious code in psychological-copper-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b640f418230ee7f5301b942f0ff853426ad88ff0d31c4ac3598b075a17479c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70850 Malicious code in still-emerald-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b42b0a42a07cc08d54a634d714c74665ff888711343966ebc407bbb30d1edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f525cd52e224d72aab424dce4c8f00d6b50d6f65044d5d6a329860a9f458f2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-bika23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33579e8aeee60fcaffdc29ec6609eece040a215b46f86391f48f4ee1fabafb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-kemplang77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c8f66478fb2c896389bb818689790a85b4bb4bf9e1a076ebd3a0dce44a23ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168fdf0a1c8be818aee3835fdb47fe9154ca35360c2a5db6fe6210a864396ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-kentang88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a725d6c0a4894ea233a3845a8309e4d9fad7befc3a712275c42d5b927ca418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-soto91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f41a878e673b8534515f691cfdecdfcab95fe7ad9716eb54b5dbf121b8b9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-bakwan85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a47655189ed6ad0e02b1c9e0e79caa5863414e2c7a199560f17d75cefea6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...