MAL-2025-68639 Malicious code in handsome-tomato-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e44d167f5947cd24727fa2afc629967c9be58275aae101e755620d98bece083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68384 Malicious code in foolish-fuchsia-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab91fd12ec137ccd80e1dee3869954781c6826cf5c774b448941f750944763a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70264 Malicious code in regulatory-brown-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca63897ef5832930d052239cb586952229c5d76b72d9d47fa72037b87f9baef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67129 Malicious code in cautious-silver-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459b3a6f9f8139a4539a0838fbe6b3e34609a18eb1a82e1a91457fcf5fa02304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71380 Malicious code in useless-gold-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2b80b553eafac05b3784cb40254f6a545700b8aa3344f2f1339b7913b35ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68253 Malicious code in fashionable-aquamarine-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91254bc229db6339c558fa5f160f496e4ac09801fc389f05803086215b3fcc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71310 Malicious code in universal-amaranth-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb638c4a6b4b40009a7e0cf6603629fea3fbefd4bc55ad9dcbfa47d2c52cc7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66958 Malicious code in bewildered-silver-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8029898026f9b96982f89a8355ddf16413f8081ece6acb05d70db70d32bc85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69442 Malicious code in mixed-crimson-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d0b9b18d72abeba489dd2f435608f82984eb8f0efda0fcbf3e8732a3afab6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68584 Malicious code in great-aqua-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eeea86226189671bb1dbbdb9b0c46a7591eb3415b02b2220634497f45d6ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69779 Malicious code in outrageous-aquamarine-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19197919fb34c950ec4e9214fcd7c5c3b76f6e98a23f952f0241b080b66bbec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67611 Malicious code in daily-turquoise-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a89f7bb083589d66e915fb0656d554e943e56a512dfa8eb063b65eebcff3918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67291 Malicious code in colossal-green-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987f041ff8a13fbc7a71c9fa79ea531ba748b9de99e30b1bfa9176384d8f3d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71606 Malicious code in wispy-green-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19975d8f0a4cfe353cce3eb88060e7cb2f5da670f7f632fba225a21187ae8170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66973 Malicious code in bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd05784c67e182c17c4bb6a475616f685504c8974efb8ceb0edebd8af264fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71660 Malicious code in xenacious-brown-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077a3333337b68f25dde653dd44db3b87cf459da835d560f6d0d926b52f839d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68824 Malicious code in inadequate-harlequin-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2844eacc920d38e438e1b9ab6f51f0f12efd2d74e301bb22b7af98d601d5f3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-bika59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82aa4f115a22fbc0749e031edc18e582510a1c19f43ffbef6d42244fcdc0dc54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mangut23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4695d7c85ee53afeca4b2dd34b873956efc763b590326fb37caabb3f5a6ef2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-bubur94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15c5b6aa17e1ac938d09dc5b3eae5b8750977289cf86b84eded37c689c52300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...