MAL-2025-67059 Malicious code in brief-bronze-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556577ff2fa6488cbaed42bd13ccf406ceae7fd8ee8bb96292d3d307ca748668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67858 Malicious code in drab-plum-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910464ea5be1cc6fab5885f48dfcf14c48c763d2728798b807ff2c3e2d9b6180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67052 Malicious code in breakable-pink-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9f3eff7cfdf25fce455185d5b3ce95318dd41e8d299f0108847a1d97abf1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc30e1022519c899a67877ec078a99646e1cb24196c99f9a17773a9e7f3240e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69100 Malicious code in legislative-gray-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6598dd43d9b88d66a81eba709146242a14e2155b6d2fcbca0cdf772b0e25b3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70231 Malicious code in reasonable-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d90cb2a35042d6b9b56ea2bd88e112a31cb6d6f85e6108dc7258b207ac0314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70768 Malicious code in spiritual-amaranth-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e5802b0a1e37797308419ad2478fb01764e9e9dc4883cbec3aa83b7df7af96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68059 Malicious code in envious-tomato-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020d7d775f5a616c9004b03d2b538e77c7c20b191d02105b3c28af959c6102e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69387 Malicious code in mighty-green-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8428e0eb5ec3f0b1e0ce7fb51d1f022d2dd096584b82bb022a25555d5d60cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71559 Malicious code in wet-coral-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b764fde6b25240a1326ee900300f1e5fc5debe982d31f9e967d37c8ce10da3c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70050 Malicious code in progressive-emerald-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb88ae567f1f5b1d4d743205b503cff50b329402341a61b62c76ede00b85d370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70701 Malicious code in social-red-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc441864099719c1b972e7e1c5054dd2a02c9dcd24fd1541d91741cf907efc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71408 Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67051 Malicious code in brave-pink-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8c32a0fc57a8434a7c6bbbc20a0baf620522460e32a7d1cb2b6c935de2cc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67206 Malicious code in civilian-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0902ce3981d4280a57000cf5222fbf3cb73197d87c3221baed691af0ccc3cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68641 Malicious code in hard-turquoise-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a89cba7a6c8ee6a1100746303a1689f144704c9d14d54cc3851aacfb38f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69576 Malicious code in nearby-amber-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24920925b62870689934f00932754a929f1c04386f728ac392843318bd6eb8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66783 Malicious code in annoyed-cyan-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab45f746cb633eefebe146b8517370ab3372659347ea5e6205571f12952e447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67541 Malicious code in criminal-green-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510938070d9a14f3458d5c6caa6e4acac517749dd78d028281014e3977ade2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-klipo25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fbc1fd8e0f9e681ce58489cc750c0645153c0f50c148118c6df4ad173ef22c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...