MAL-2025-66573 Malicious code in above-beige-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d689bdc49f4c3c2908b88030acd8bd522a89ffa400e01a7375ddd928e9c5856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66962 Malicious code in big-lime-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6478b513192b4378199d37eb9c89f7aa78ba9a0888874402b0e0805b4064c753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66623 Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68299 Malicious code in fellow-gray-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bb00a2ad50757c9b97187c89368d66cdd3a65a6352dc3cf3be663fdc33f246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67533 Malicious code in creepy-gold-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e815b3e92484115c2e4a37decb34b906a9e92c2b5237930ad6b9385ee2702243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68266 Malicious code in fast-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175116f086b8d70983393da40e15c19aca1da52bfaa3d6e6c99e9e1ec3080778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68861 Malicious code in independent-silver-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5146524a5491b8f8b5b0d7c09096983c8cad001e274ccbbf4cd31e4e6fa070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70746 Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling-gold-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d8ad0ccf571605b94273519e366ee34c781ca576a4d10c220e3fb6cfc794c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-aqua-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421d5d948f865480c916e7a78bd3634601569080e5a1cfdfee1ff76b0aeaf019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70850 Malicious code in still-emerald-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b42b0a42a07cc08d54a634d714c74665ff888711343966ebc407bbb30d1edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69840 Malicious code in past-blue-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d740580eaf360530e0cccfc3a0b3fcb98e3dd422a31f34fdbb96e05d2023b97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-moccasin-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2380f7c7d5676b78e8c4b75f6a1a41af3021286a5f5b3bea45cf2d522182b98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67330 Malicious code in common-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753faff89b4f300426746bc70b549687722edd1f4875a2baf6da599de95a4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68262 Malicious code in fast-orange-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d229bd5cfbef33df46f7469bab7e870e3a16c8dcbf3bdcd686a95633bdfbcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67790 Malicious code in distant-tomato-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbae09972e3397650068bb3fb938001c5d3067e84d3d8ae38911232704c87ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71067 Malicious code in technological-purple-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a691814793a85a196c7005d397d918f85cfcf80b305ea6b84dd582d6eed09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69380 Malicious code in middle-beige-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d49024106ddbefd96d5730a1e36bfd4f945d740b06516e2da1b7b8c7a040b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70703 Malicious code in socialist-green-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc7e04a1d8c102740aa9a5a2ca5677bb71f662c0da3def1fec5716d1f0c0a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67276 Malicious code in colonial-aqua-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421d5d948f865480c916e7a78bd3634601569080e5a1cfdfee1ff76b0aeaf019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...