MAL-2025-70536 Malicious code in sensitive-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8ad81460f788e0a350c0f4029dfe3a16ea5b01ffb294d21178786d0942a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66934 Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70272 Malicious code in related-yellow-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97cc6b7bcbf334684aa1a74bde5fb5fd02cdf2fcde2200107229fad4a30bbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70366 Malicious code in resulting-copper-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36175b16f341ad83d6506d14fe384d74ed5c1864ebfd4d7761b72c1c3493792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69301 Malicious code in marine-blue-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f3480b7a1673ec8ac747b5ef3b6c7f2e708648e82e25434b68e7d07fe30b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69515 Malicious code in mutual-cyan-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f928c38665e9791d379efe11a7f034a54b53e632b593da70391fc8dd5c72a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69861 Malicious code in pents2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691214dfbecd05bd8282a194106b31e1a651b587a045e4b86e5a83c33b43d343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68258 Malicious code in fast-emerald-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d96843802bd294c97f2f6ca5f062fdafe0fa3548667deb8c519ae734beb983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71767 Malicious code in zerizt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc850463ae00925739b2b6e905cf9fc3e8c54ac26872e733a10c7058a46d222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71581 Malicious code in widespread-lavender-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715260f40dd4a37fc7d44587cad95e8d27ded3dfbfe3724bb9a6ced2b261a1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66863 Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-amaranth-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16883d0aff72d352c9086fe2111e7a7a9ad6d17b93d3d70f1902e6bc31cc6237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integral-crimson-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781c1453c4b5ba6cc337af27e030efc0df4edaac77cabf347126d79938f8f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70330 Malicious code in representative-emerald-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05acf79c42bc794cae9fd8b4c9f267f2f79e6087403f969b62ca315939e927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1c4746010c8c717817539b1013ed3143ecb21df2b8bb8449f7fccf9af2bd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-blush-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159bb978070ebdc42f2c9ae5c2ba0ee6df33fbc5dfa440fd2e6b414695272f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in territorial-aquamarine-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c9180136a44bfed529cd164c5f7c3ce41c7d124597b01a2f962393331152d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful-aquamarine-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8263d2c6e48ea165f9c77064c420b44ec852bf66784508d06430f94345b5ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70926 Malicious code in successful-chocolate-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d08d06497ff0b4078ac767bdc3324815f5e500a8e6ecaf73f62ba28aae4d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...