MAL-2025-66764 Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67298 Malicious code in coloured-jade-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bdb1b4c10d45c9948b5ecd0e46d3370dac2a30caa92a2f4f83835eaf938adc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69290 Malicious code in managing-tan-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8446a4fe460ddcce1e810edbd07eb5dfe84bf09c2c18ba4aa6db4f4728a9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70404 Malicious code in rival-yellow-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a331a2ec5abe14b377923ca86185024f2dd601bdc1421666811a827e13aba20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71167 Malicious code in tough-lime-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853073ffafbb0d4a2a8fd92cafdf1b20bbd0bd6db91b297ad32449677dcafbd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70517 Malicious code in selfish-aqua-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc6e56f206041a3f1c069ee091f812ec14369fea9fec65fceb83cebbcc662d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68186 Malicious code in extended-coral-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc54e2b12f30f42fd8bbb5a1837bfdf37b4e9fc27867a1220e3992dd85f2923b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68925 Malicious code in intact-crimson-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593f864bd2be15f0c9fcb8d837cca08ad4ac1b253c8da109b8714dcb1f4e640d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mute-amethyst-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88248a1b47a2412a421a35bdc44c80f6ee85d36bf38dc14f51c3b737f9d3a85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-chocolate-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4d7c57f2144853be7baf855961c310832138026af252cae348511df953ba95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-copper-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bd70b4884576b3e287097be1c952d84606ab3b0caaf866197b4385ba9eba47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-bronze-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67477320dd2c845859b97365f5cfeec24ed1a51d06462ef1d9540cb09b672790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68596 Malicious code in grim-yellow-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6516af53b000cd45d29855cf8bd69875a1d222ae586bb210f125389c0eb24f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69947 Malicious code in potential-salmon-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15fb4df96427aaa6fdbfd8268015800afae7244df6ccec2ae7dc55dd615235c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71109 Malicious code in thin-fuchsia-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377dbf16e1afbfafb4d844e40da7927a41bd66f4a032158ddb398c8c2222f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67473 Malicious code in conventional-red-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814aa4f0dfc74d0fefe9c5ac4ebfe61e0fc891e5368bc14191c2017623391dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70684 Malicious code in small-magenta-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f5dc848ef34ab27ef85e731483b99788cab7f05272a33ac77ee0c33c1a9db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66631 Malicious code in acute-coral-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94ff038c92cee08ecc4449683b44005c35352944afbd96d38351ee85bda4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...