MAL-2025-68865 Malicious code in indirect-yellow-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63fa815acb544e56de6adffe85354d40b099da10d5e638fc3ecc069be6cf0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68160 Malicious code in exclusive-emerald-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ce507008d1e5aef95740474908c80dc91ee5938197efa321066e1b066bbce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68690 Malicious code in holy-harlequin-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036af5bb09173357d055436d457b8b1957e8d700fac2f600d56b49a5c8e6ddb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69088 Malicious code in left-fuchsia-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7b30d014a7c2e963db945c363a0b87b7f0b8f25a8231df93a029602bd76734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66835 Malicious code in armed-copper-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3af900662ab8b2fb082fb4f7eb88662f90e80868c3be089ca49203360ac4f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71034 Malicious code in tall-fuchsia-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a83ef88c226526ab9d33db01d385f810d27e37ec0e1c72648177d75e331093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68602 Malicious code in growing-cyan-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420521703526d241e3712bf1a024b82445898a2b6c756c8f0f65051d386f21b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67089 Malicious code in bumpy-orange-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4ecb1da48175d3be0dcb4391fe19e75a11b55818129a0cfdd41ec738ffd9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71652 Malicious code in written-sapphire-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c851f0018689a0b45b91d876b8973f078fdb87084a370d99c36d8a906465f906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66913 Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69785 Malicious code in outside-blush-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb585e2534df279668c244fa648dab02c569261c227ae04ac2de1c83c302b6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70740 Malicious code in spare-white-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06917ed4c161ff8e5709c9225f92fd1d3837cba7985bc5cc23a274c2a0e6858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70534 Malicious code in sensitive-moccasin-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ebee4a0852efa92a0aa82bc42cdc314c640d75105c131a2ad9b4e4d98f5844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70546 Malicious code in severe-lavender-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a28600d212e6aebd7404ed287bf4e9d6b829f9d0806200fa0a347310989478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70117 Malicious code in puzzled-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0cd3fd6c02d9098784428424e4fbeb018b16fc13343e5318cf785795774cfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71162 Malicious code in total-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d797c6b5d780b00267c0ccff59140df7ef7024c8fc7b966c6f40e6b7b671e039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70849 Malicious code in stiff-red-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa5d5700c6127849b943127fa1c1aba66ace916d36e1cf64f58646a7b13a7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scientific-amber-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c977ab90c9c3ec7ac8264ad242b76ce5e9a0f4b79ed58ca90402c56a428b2984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful-olive-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450b823f9176e0d50d146da35a5f3680437f9d3327fd2c86fc6db5c7be4fd9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme-tan-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a189d6a1a57068d599e248185f196616262e136064a9782556b958a7be9252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...