MAL-2025-68301 Malicious code in fellow-white-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e386cf8e3c8d8d23fec4917cf88cd4d7ddc20fa30cac669a0b0c4c1409adcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70635 Malicious code in simple-tan-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2468877e2823bdb07d8fc7b7030416ebb5a22ff7a404f0a4d44c269f97ac24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69233 Malicious code in ltd-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72133c33248fbc70005c559d2fa8a0257a643438ea65a2bf47e4ca8209579d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70294 Malicious code in reliable-tan-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f564a8500cf19eb18dbeec15075ca8db697da1dcac0bdb934905befe483f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in philosophical-coral-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d269e723989517eb186dd3178d10d147ae6eae6f1fc45a6a9b032024dcca7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-gray-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbd0fbe549adf9cfbf2db3df1f64377a2540538a34b3a2243167ae9f9d12805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite-harlequin-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d604f8ee5ae1c1f5a06339cd0f8384bdd56abccbc49108a517fdf6e89333f7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legislative-gray-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6598dd43d9b88d66a81eba709146242a14e2155b6d2fcbca0cdf772b0e25b3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69108 Malicious code in legitimate-crimson-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e25c58eca5f74cb2ae8d108780cc99d510b1fb1d36c9bcc64d3aea0638dd6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66796 Malicious code in anonymous-rose-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d6d0e18cdee45c51e2fcd1e55a045f9e202224d05377f3b2c4c44c725eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71383 Malicious code in useless-turquoise-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4f2f9f8cc7ac3b9160ed208bedb0818a866ca78ca4b22df75a491ae5fb7c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69993 Malicious code in pretty-moccasin-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce515512d0715a335eff1fad4116d7ddb18cae66f468d7d36b5643527ef2150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70489 Malicious code in screeching-magenta-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263fba1149ca81bdc73d21c5ed6de8faae129a72f5e2644e827ea620540bea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68076 Malicious code in essential-azure-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dc7741f52f84c2afbbc1e73e367189a4d0ba7f2259373dffa7fffb5183e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69447 Malicious code in moaning-sapphire-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89e87d76e1beddeed28a699d5c5b1e9fc13b906f96f71dc3cb3a42b898718e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69030 Malicious code in just-olive-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2b3b7482758c1f0981d8192d5a9472891ef33a3f9d9e9e3e42c6f167eb1755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67246 Malicious code in clumsy-blue-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2192a3413946d209a773e6fce679107c715214ce9c78e822a2b24abc3a806d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69136 Malicious code in liable-rose-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79f5add4fbbb81f0fac67bdc4123b3a85a0501852b8807b0f9018bd0f896e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67839 Malicious code in dominant-fuchsia-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66784b63dc03fd36b548946481748a2b043e092f2330fa295bd7553b3f5b2b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...