MAL-2025-68927 Malicious code in integral-green-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2741f721690a7673d9a821f68a28d09272b673b1f1ed7c70be4f5cd90316c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68062 Malicious code in environmental-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5edb1ace0966574a65cecd5e20f11c555d3820e852a59279e790ea85e41f801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-copper-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d19612d963cde1e745732f0bce077c191b1406ebdc0270f63710f8dc1ece886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political-violet-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4f145c201c8c2a3eb75e5cb653aef95cde826439e92618f4da115075f1d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68684 Malicious code in historic-purple-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd4f6743c8f2eeb19d293a0518149d120c3145785ed8b89d8463d6f4766c508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68891 Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66837 Malicious code in arnecx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0890fc873f87e37d5296c5f26e0e7d194277a2a589f0848e17850d7d4fcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66739 Malicious code in allied-gold-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8853c5cba4d87649bdd688a55e4521666629cb028433af29f15d83ffd9ab578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66873 Malicious code in attractive-violet-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5310dc84651e474da95552a9bce3efb22b3b5131de8404c8bdcc534b9204d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-dradag99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b00654ccdd5222c0a3c1f9e50ea401463f011888c7f17b090ca56b017a481fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de157425bc69925e32fb8eeef41aac50b55caa77f2950eb3db142befffdca2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60942 Malicious code in normal_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb36a883674a5caea611ebdc65cdd809c8edc2e88b8b7dc4f5dc68bc0af084b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-bakso32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281b6e62fc9929859d70297f50d048a022e762eb8d2f6e01be03fab152f2f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52267 Malicious code in nana-kacang33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741b5e036bb5f77e79d47d2e4107f8f40d6596f2659e89d66d8fd83ea3fd7ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...