MAL-2025-69515 Malicious code in mutual-cyan-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f928c38665e9791d379efe11a7f034a54b53e632b593da70391fc8dd5c72a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71767 Malicious code in zerizt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc850463ae00925739b2b6e905cf9fc3e8c54ac26872e733a10c7058a46d222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69861 Malicious code in pents2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691214dfbecd05bd8282a194106b31e1a651b587a045e4b86e5a83c33b43d343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68258 Malicious code in fast-emerald-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d96843802bd294c97f2f6ca5f062fdafe0fa3548667deb8c519ae734beb983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69711 Malicious code in old-peach-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16c8f991cc7046285f814cbd05cb7c9276a9d3db91a0b68e5ba26b3f842e267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70480 Malicious code in scientific-amber-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c977ab90c9c3ec7ac8264ad242b76ce5e9a0f4b79ed58ca90402c56a428b2984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67668 Malicious code in defensive-cyan-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8731c0549606a5894f4d376bff280879a46fb0523161cade1fa51fba4e6af76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70366 Malicious code in resulting-copper-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36175b16f341ad83d6506d14fe384d74ed5c1864ebfd4d7761b72c1c3493792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69005 Malicious code in jealous-pink-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af975233e1b45f4cc58624b54d559066eecdcc7838f0f1e1cfcd1a77d25eac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66934 Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68507 Malicious code in gentle-plum-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ea6fb3ad1d0c280c7a1ab074a3eea956e0e303dee4cf4ecd80f2425a99f88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70272 Malicious code in related-yellow-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97cc6b7bcbf334684aa1a74bde5fb5fd02cdf2fcde2200107229fad4a30bbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66725 Malicious code in alive-harlequin-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f69e53c7dd84c99ab8c1994c0c6f5b75352b49fa75c583294a1353cea1d8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71211 Malicious code in ugly-fuchsia-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aef1df003ec4fc2ffb0c9b61c6032f27a58e03dca395481210453e93309853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-amber-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c214348716d73ee2271898d203b2fe300efd95831aa24766074fea8f365783b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere-moccasin-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cf7a037fb353742a6a6b908ff0ce74f7007b0e06ce95d36ac1bfbe596d01a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail-orange-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fb85d9d621aed854fb72ea4742c2d6853dbdb00e441920671fd39ccf303f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced-purple-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78b293ca94595749b186dcf7cb309dab9c1452b211b5bae65a436fb7206170a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic-sapphire-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6818543d663edafa30979a7a6c25bb834a995313e115ecd2f74004daff96757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...