MAL-2025-68507 Malicious code in gentle-plum-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ea6fb3ad1d0c280c7a1ab074a3eea956e0e303dee4cf4ecd80f2425a99f88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66833 Malicious code in architectural-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1ffec13a2a5e1b78d05b89f5ac3da1731a83cd3a6cba3be626a6c5728d4a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68491 Malicious code in fuzzy-magenta-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed93d9aa32dcfcc53b1bcc4132f30a4517ee4dd521ce78be5fcb21c67719b6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69196 Malicious code in living-maroon-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2a3a8cc6811fbe10577051365221b17ba07991b9a914c5f2fa68257537e400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68446 Malicious code in frozen-white-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842731e4a5d31da9b582784aff179c2da71becbd8d9924ca85d16c2c2ff59a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70635 Malicious code in simple-tan-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2468877e2823bdb07d8fc7b7030416ebb5a22ff7a404f0a4d44c269f97ac24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70480 Malicious code in scientific-amber-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c977ab90c9c3ec7ac8264ad242b76ce5e9a0f4b79ed58ca90402c56a428b2984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66725 Malicious code in alive-harlequin-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f69e53c7dd84c99ab8c1994c0c6f5b75352b49fa75c583294a1353cea1d8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66715 Malicious code in agricultural-black-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71122f2472a41a2e23826ac83bd59f536a662514a98797eec62aebcf4773c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69005 Malicious code in jealous-pink-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af975233e1b45f4cc58624b54d559066eecdcc7838f0f1e1cfcd1a77d25eac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-purple-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f05fd2a80e7c60ebe230c9cee5cff9cda413096fa0530180354ef768676e96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere-moccasin-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cf7a037fb353742a6a6b908ff0ce74f7007b0e06ce95d36ac1bfbe596d01a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specified-beige-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855532255c4a0928ee0bec8744685be14e600e7c7b0db99bde26455813544346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail-orange-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fb85d9d621aed854fb72ea4742c2d6853dbdb00e441920671fd39ccf303f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced-purple-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b293ca94595749b186dcf7cb309dab9c1452b211b5bae65a436fb7206170a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69487 Malicious code in motionless-purple-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65004d9c2a5e5e5655e398ee3ee44c7e3d14ef589f23c4d34c6f4672b130bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70279 Malicious code in relaxed-coral-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3589a5d770d47f3d3b30349c1143360702bf908c298903f36f82c2454e8dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking-purple-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca03b8b90ac16657270f2dfb7a7c069c7a164d8f8b54e77bf59d9e8dc084865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...