MAL-2025-68170 Malicious code in expensive-emerald-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885749b07e3888201cc3d4ead094deea2ba23239363414ee44eed76ed7301d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70367 Malicious code in resulting-maroon-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88e235d1fe991ea757b074435610d63e3350d8345ccebd7c903bae85bc10f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67232 Malicious code in close-maroon-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58246bf34f8df01b90166bb8d5755fdd24ad693e872389bebdf91b3063e61eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71045 Malicious code in tasteless-coffee-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c528b17efefce5e949e95d4f64236255a17876de0144cc4f7f337e81d4141f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71199 Malicious code in troubled-magenta-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa2bf3f48d7718a5c5c105134ee1bc81b46a2c3d501f7bf70e8f33ab95be865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70001 Malicious code in primary-magenta-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e519a452a28cfa7312d520681af8504b83d6866748976e49b8e9dbc1d7fab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67656 Malicious code in deep-blush-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a54bc6584864a8f5384df56a8b41493f6e60fd11668bf22be114aa9f77e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66700 Malicious code in aggressive-chocolate-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece94d09f87ed47b7aab12159e5ccc37d8feae1c28a6da7c40cd19a774254722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70746 Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70187 Malicious code in rare-sapphire-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f33c0e881d649709057736137a5f0dbf2712506d8ada57d3135fba41546e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71679 Malicious code in xenophobic-purple-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece29cfe9a6effd409d6c94fed03cc1a96b85ef5952eccc192f87b574e4d004a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68670 Malicious code in hilarious-amber-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cdf7b64b17cd945e91466b61c428f3b83ef6a5d4e0dbc0b16cf87d506edee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67760 Malicious code in digital-white-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eac7a67c6980ce8a5e0c77caba35bdaaa225a1d6e34c93d0a7529c92ca1b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-emerald-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9e6163fabb8bd0a2dcea5d759ec8ab24eed059030b6db14a6500bfc4716546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content-magenta-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ee92f8bdb2d9e916825d74839e3dfd2f42e2e85936903e9f2b642c22a68298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft-violet-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b40a4d69aba395ceacd4ede4027eba92316f86a4da34d48027a6f7ad063e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved-sapphire-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ef6e2dae3d911bf2b949143b34e5a64d491bfcd90f37e50d122c5bda69a648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible-amaranth-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3089ac9b806029416d35e7fe09c3ecfce49d0567ac83709e0b22a42d0dfe561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...