MAL-2025-69595 Malicious code in neighbouring-azure-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1f4c9cb920d4083a01c8a45d49963121b1ad809256d25aaec562aa99d5e45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66851 Malicious code in ashamed-crimson-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1a532dcb30e8d5c285fb1098dc0c89255879824141082caead2a8335b1f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67592 Malicious code in current-plum-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7585d8b0f8c1752b908e53d79538148847fbdd369fc4ea219889d131ac4279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66941 Malicious code in beneficial-azure-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9652ae51ad8e3347e8f0954fb25c1bb8dbc73324fc3332c9bd0f440e5b30d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69232 Malicious code in loyal-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37a823019d4cdecf614b1e5facc002b38182c11bbda9574ddb72a6b3c07eedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67009 Malicious code in blushing-aqua-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d938324acedd4726c66308424ba3ad390f1c4cf8213effaeebeb9722e76b284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70988 Malicious code in surprised-indigo-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f277c7ac6c98d18136673501a714f7bac4d7ba4870864df42f90024096b1c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71772 Malicious code in zeroth-pink-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f86afaa6f6bb8a17c8893beb0f3f93ee604dbe9dfec6dab22673c6cc822be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70996 Malicious code in surprising-tan-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da5115ecbe3d28579567988586a88cca7b709a9fad878b1796ce5e259b9e391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67166 Malicious code in chemical-purple-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8be90193f105193217f54a3a8441c656af3b5411cfd14443120ecf844d4cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67225 Malicious code in clever-orange-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1596f35a38160a7e604107d8ac58c135fc2f9545ec6e517ed7d3c396e214e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71013 Malicious code in sweet-lime-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331997ca0eae7b1b4bdea256c36958dcfda3325ca0d31d45675339849fab0bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68003 Malicious code in eligible-peach-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e767570f9898b52442a8e4d3cd107f3e359dfe570b9c7f006e3aafc420f9438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70944 Malicious code in sufficient-maroon-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d8c7a6b9f4533d4108040aebeb923cd0b7edf4f1b804c486dab6d88f1f08b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69269 Malicious code in major-gold-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2205c93dfe74e7ea41cbe47475ffcc62cf7d136ed2bdbac95da671dce46af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71769 Malicious code in zeroth-beige-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0169fe4d449096f70bd8ae55dc1621873bbae21d5d502e9fd8c384d5284373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68214 Malicious code in fair-aqua-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa0954d82691215f2475a9bc231a3f0a48559802793dda8d0f834ecb6654253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68263 Malicious code in fast-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb29ad868a03e9ddb9a0d3cb0c2a305b56894e389f049cf6f3acafb83a9bf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69419 Malicious code in miserable-plum-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172a73c7b4003e0719f1e716a5ea303e6e87dd3a4925a622a0f7b9ef11b679f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-serabi75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbd10c57899fd06c4ed0e86d749fa2763afebb533f42417f7146c9c6b024063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...