MAL-2025-67805 Malicious code in distinguished-silver-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d76ceeffc278ca6cae12d3112781243653f486152e24f0cfa1fb26298bb2d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70036 Malicious code in profitable-beige-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f936d59fba9a693c78ebd8b8c759c92c8af8dfd20a3831831453028688c533d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67247 Malicious code in clumsy-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb854086fbe4c5c275ea1a6c924e4d77d04d2d461b9e2b7a92624e10644dd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68345 Malicious code in fit-olive-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d49f5f4d4558f3788ce82a2e896cd1e2e84abf89af33792e5faff81af79c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67340 Malicious code in compact-green-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c715dcbad1e86b4bbd8fb7263722919b92e8fea2085f1565b84b2789190e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70068 Malicious code in proposed-gold-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8068985fcda1c305f46bbe863a6296ba79dbb09da3d1859e92aa9e1f40f3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68794 Malicious code in immense-gray-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65480087fac91a002e0cb3e8e0e4b6e2426f2e61a3c0795b4acbb17a302e5d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70813 Malicious code in stable-ivory-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60253aac18ccbf3661be492403f29ae2eeec8b924f277d61cb33e11dc26b5a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67531 Malicious code in creative-black-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8620c6bd3e7e30865fd6023818cb2bfd7156bdb1e6769ec4a170ea50f3c388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67609 Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main-coffee-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399e9569f57d1f6e9b8028b704c023bbfb0e549753b5c63a174fcb1b87e849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official-chocolate-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9802dc82b8e685ef80e979e433f32ad19d859031ab4506373d24bd68d3c92755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68023 Malicious code in enchanting-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc242006bfa1a3ac7d627d4dcb95de5fe968643e8119d6b6fffe4746e5d4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69807 Malicious code in pale-beige-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4844cc0674b3a81e22736f186753c178481e40e87e8efbe5b2fbf55a522b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-botok39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430a8c7f010c1501a8fe1a9cf340475f3071ad201167e4e9c3abf23bce51b0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-soto23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0eb1f56020cef39298d3ece041973380f8e39be81c56973cb3ed7f506097d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-keraktelor84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40882cf70ef7abe1d925b0760a60ef742657044ec37a5173a8ef398d3cf0592f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-brengkes36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a513e6c4f1dccbde7822bff3741fdead76fb71d0e5502e4905e57c48ea8a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...