MAL-2025-66870 Malicious code in attractive-magenta-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9385e54d1d98f957ca20fb4494ca8768cf1b4020452177770316d78aa5e9f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70486 Malicious code in scrawny-emerald-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bd8b04ba18f17f5ad122e8cca295214aa4a15dc1abf59d456017d57d60ed68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70050 Malicious code in progressive-emerald-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb88ae567f1f5b1d4d743205b503cff50b329402341a61b62c76ede00b85d370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate-olive-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1685a2b91e71eb22f4e1d2776b1b294924d99f8c8c7d3241996f248144b7285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70958 Malicious code in superb-blue-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11662f2132569d9ce73869013df64003ee0284d624126ab3dcdd0b412eb2772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67966 Malicious code in elated-plum-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4cc5602110887b833f734dec3a67c46678a8a982b0e607e4434b2d330c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69367 Malicious code in mere-beige-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a4bc64185d18d8bac0d364207516154765a58df42258dde0b4a9c1521d6adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67413 Malicious code in confidential-olive-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281542f8009b505d9d5b7fd5f3a0819908f11d3d2696f0b649ce0035df09849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68217 Malicious code in fair-salmon-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e78ace9d2352a0da514059741015645ff8966e951eaaafc211b39a6132dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67284 Malicious code in colorful-black-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d5910c0cff95b73f5292666cf0659c144c28813f93dd88dec726a9167567b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71102 Malicious code in thick-blush-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e7f22ffc7eb1f8bb057285924ccebd99dc41765eadfeb30c0bf751ce37087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68373 Malicious code in flying-indigo-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f984810ce0efa3ccf61187cb191049ae965e66d375b14d2524f1608fcf7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67747 Malicious code in developing-blue-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25667a5a0d4f9f70426c1f01793ed0527c3311c362d25d3a3f2a72fe8717a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69938 Malicious code in positive-scarlet-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d93c4763da42aa36d7ab737d5d0ca6e03d72fedf3b37c7db01b2b4cb6918e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71616 Malicious code in wonderful-gray-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78515120ef92d62fc21017834d629a81d509c4b67a4d00ef50c4a96991e2f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68966 Malicious code in internal-azure-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333433ff810a17d1e7261d1a0a6e88d9eab8839c79850d4d548e80fcafe1fde4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68385 Malicious code in foolish-olive-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320d3aa74b61345ad421bc77418c63ff0f1faeafd19c20d21b99f235f205fcb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ancient-salmon-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b27c9030d3170610881005ffaa905882777928bd28aacd4836edef97dfba137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial-jade-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a9cbbb64438caa2f6d0e9f19e76e5983ca2024e067c77ab28d097f34c49256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore-crimson-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de034b20a6e5ba4a2c6e29bec9c51e42f5440f1b0870ff24a93a60fdab7e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...