MAL-2025-67292 Malicious code in colossal-indigo-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8052b473721331e357824eeb7c41e0259df26525aa5d99997f597acb2f0221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67404 Malicious code in confident-blush-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a27b35f0b3943ce9180541fc924746844a9287da9fe10642aed74945016673c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70901 Malicious code in subjective-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba082f3db73056c1df3726e1625caf2e364664a36bfc2037e15bd81f29dbc6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68436 Malicious code in friendly-brown-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09012ed3a0d324221857fddcb7a5845c4c97492b31b8395678d50b4c50a76822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71222 Malicious code in unable-silver-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff46723e5051d67aa359bb74848302dba9ced28e1265d10c2a79987afeda3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67958 Malicious code in elaborate-aqua-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b467294fd71b6e7941989dc56c76ffdac339ad2dd1102004fe8a4927c3702260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69279 Malicious code in mammoth-black-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ced992abcfcc4fdc1051e69c55193333e19e613d56906644478124a80b30c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67680 Malicious code in defiant-yellow-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0626a13f5064a37102806d73cacc0211ef06e2d67ba8307c6908287b24add99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69259 Malicious code in main-crimson-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72018a459fe6b03c5d0b9833b3db33b3cfee6c229c3f8b416243ead018830e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive-orange-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0d01f9781e1840dadfecec22f5240e358b4ffd4bd9c1a69c70a77c9680d2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69094 Malicious code in legal-moccasin-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b573c5ec17a77154a30238128d3d26f169e2c35a9e8f6397f74131983bb478c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68104 Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66865 Malicious code in associated-purple-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e319095e195b55789255547211e41fcb16217356b00829ea66b83c3cf92894c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional-black-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea70bdf04196031dafd305b7540272f21609a4a37a01f43f069874a87f7b982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-coral-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbb6450b62db99dd1863a2616d6edb15a2bd5e8e145c503b0e630ea599dfe28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary-crimson-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8884cc126ea27384534c6efb37f9e3976dec10dfa0d88a16d128787be8f5ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal-apricot-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddba2e27f104eeee2d621a20247beddf762809fda8d247e37a45d8a7a77debf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-violet-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd2e0cec3761605ecb08a23b6adc458b99a58468dd245abf1aa9f7720dfa597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial-red-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8cc5ae80c7bbd1c226867c96be67aa5906952ada4802a6ac6358a4399a4dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...