MAL-2025-68523 Malicious code in gigantic-purple-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1593f710a77caadfb2d9b68900a5730b8ce4dfa5a2e7cec0f1f3e1474d99019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69652 Malicious code in nuclear-cyan-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa32e8c338373ec53422b37da9b5c3c3478e171d678442cdf50f7fad4975ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66624 Malicious code in actual-amber-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a4d1c80c457c80cc4b8fe370e4738d4360e7a76cb4a7122abc41ee43a77183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68621 Malicious code in guilty-azure-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82d6815420e7d8c3a0dcbf323fb4a7335b3f1e8ad24fe7b4e44876df129ed53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70797 Malicious code in spotless-sapphire-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620cb9f8abb1c9e40fce53ffc026c9620e57eda993fca43dd9114b0968810a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66716 Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67373 Malicious code in complex-peach-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f128ef25cf365a2af343225b257116e9c34637f6e4cc5e3ad10f81e67756023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic-orange-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388e478470e7723138a587626a1b3b5365c62ca768c9e6184dd7cdb3be5c62aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68921 Malicious code in insufficient-red-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400970f0d41bb2e3753a74d093bda93ca752c71cca0d2ec7dd565cfd97c9ee8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67428 Malicious code in considerable-gray-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6eddda8f12b7e8eec0de09bf526a87e626a760547f1332953af7e4563353f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71185 Malicious code in tremendous-scarlet-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40213fb2894a0142e877ae2527ea25813893570e7edefa1fbf2eb29f190f4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67497 Malicious code in corporate-moccasin-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9898973edb78f8bad8007848c5fc12536eb74358521049473ac902a749a48806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-buburayam3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8553fc71f2e4dbdd80d507a45a2c32b2464288dac8c4aa9cb8819f5585b69707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kemplang23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37a5cd68b389f9dbb30307ff6971bd046cfa11afd858fa0349cf9d51334a8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-ragi65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833fe830fc2c3e93b0f167d2e581716907a84da67f934779f8a4f99d7280bb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lutis25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd97a13c1b524c85eb5b1c0b549380c677f73755c89c300916e229a751a3c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-serimuka94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f3d3af017b8c3c0e33d1e519fa23bac7bcddd23c7157292355a615d7c34740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0be82e339884d218c57d8edb77bc0d03618d84848837a041866fe45cfd908fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-rangi13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b19fb0886369879a3cd7d773368d533f14b902cb0d03b807ac55b3a746f11aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...