MAL-2025-67531 Malicious code in creative-black-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8620c6bd3e7e30865fd6023818cb2bfd7156bdb1e6769ec4a170ea50f3c388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71442 Malicious code in vicarious-chocolate-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a833bead0cc4cf135bf30e46c2d0a69c42d2cce9203d138a1abc50fd9471b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70813 Malicious code in stable-ivory-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60253aac18ccbf3661be492403f29ae2eeec8b924f277d61cb33e11dc26b5a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71576 Malicious code in wide-gray-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f9f46ab17a8725e6c2a214416a6503e882a9727e0bf0129ba42a11edd9337f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70036 Malicious code in profitable-beige-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f936d59fba9a693c78ebd8b8c759c92c8af8dfd20a3831831453028688c533d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68345 Malicious code in fit-olive-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d49f5f4d4558f3788ce82a2e896cd1e2e84abf89af33792e5faff81af79c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67340 Malicious code in compact-green-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c715dcbad1e86b4bbd8fb7263722919b92e8fea2085f1565b84b2789190e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67609 Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70941 Malicious code in sufficient-crimson-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dce041b106780ea5890bb580c34e9bf9075288038ec16cc1bc6709fe6fee3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloudy-amber-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22fa19c858c3a0648ef341f4c5c35a48ddb182867279307ae148c669310f0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67219 Malicious code in clear-crimson-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f57d5836e71984395d838b1da38fb7d3df74ce16584ef7769b10537ec0000f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70944 Malicious code in sufficient-maroon-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d8c7a6b9f4533d4108040aebeb923cd0b7edf4f1b804c486dab6d88f1f08b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-brown-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7e9ad811ee7126d7567fbe41b823891984378f252e95a6e598b30e8a8f4249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-brown-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f333c93f2b081e0cc7a089aa032ca819d40ef569898b7ccbe7769e77bb19525a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ketoprak69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df1b5ba7f35d5c1318f887f6729df929a9455d4890b2c8c46f1c5c716a2dd2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gulai38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6e697baaf24f416de04bc33c87503870f5b7111b10aec057e589dd6d4ef6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-moci13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afb2a2b8f39aac686b6f987547113c30add50657752d6a94ac2385d91231d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-ikan73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfaf4efbf477e7c74403892ce888b5125ca145d600d7c655435e4486a8bcf7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...