MAL-2025-66865 Malicious code in associated-purple-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e319095e195b55789255547211e41fcb16217356b00829ea66b83c3cf92894c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69157 Malicious code in likely-teal-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e5430b58463a9bed80d3cdbe82cc8fdf5664ebab0c318de7ce4fabb09d3a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70191 Malicious code in raspy-bronze-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f281a81755f1e596d13663de9ae91e45537855443d02ee67cc91f37a26b1b964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67404 Malicious code in confident-blush-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a27b35f0b3943ce9180541fc924746844a9287da9fe10642aed74945016673c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68824 Malicious code in inadequate-harlequin-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2844eacc920d38e438e1b9ab6f51f0f12efd2d74e301bb22b7af98d601d5f3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68584 Malicious code in great-aqua-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eeea86226189671bb1dbbdb9b0c46a7591eb3415b02b2220634497f45d6ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69094 Malicious code in legal-moccasin-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b573c5ec17a77154a30238128d3d26f169e2c35a9e8f6397f74131983bb478c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67126 Malicious code in cautious-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1b206ad012320110f03436837d2dfc620d43d35dd345b2b24cff4c25cda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69279 Malicious code in mammoth-black-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ced992abcfcc4fdc1051e69c55193333e19e613d56906644478124a80b30c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70294 Malicious code in reliable-tan-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f564a8500cf19eb18dbeec15075ca8db697da1dcac0bdb934905befe483f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68301 Malicious code in fellow-white-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e386cf8e3c8d8d23fec4917cf88cd4d7ddc20fa30cac669a0b0c4c1409adcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68711 Malicious code in horizontal-tomato-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73369bf60dd7256664f099758550acca0a6313f2130ec36fcf7ea078642af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71660 Malicious code in xenacious-brown-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077a3333337b68f25dde653dd44db3b87cf459da835d560f6d0d926b52f839d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67813 Malicious code in disturbing-maroon-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d588550aca143f1bf55c3a526a316280d586cf0df174b571f9626d546804c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69499 Malicious code in multiple-amber-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b14033feafd6c4990694c3739ffdfebbdeacc81876995c04afe54c7b87d206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68504 Malicious code in generous-fuchsia-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cff985bfc558dcae248a99dbbd919ecf8abd42ba3d711acbbb11078dc244a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-mendoan87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753e192918f05c68afa68f35a1b6a759e547f6bd5151af409b10d7a5132b2f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-keripik37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b092d599fdd780a171f8a35ee467ee4ef00fbac27b04f5639ccc69d2967ca28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-bika59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82aa4f115a22fbc0749e031edc18e582510a1c19f43ffbef6d42244fcdc0dc54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...