MAL-2025-66732 Malicious code in alleged-aqua-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd480ea24df9b0bbf1c329bac6ee999198d1a94ed65c126f94d44ad21b2b5af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67247 Malicious code in clumsy-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb854086fbe4c5c275ea1a6c924e4d77d04d2d461b9e2b7a92624e10644dd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70599 Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69913 Malicious code in poised-black-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cea2af0479f03858062e4e9a7d55003710e044c27fa8cfea2406827f898d892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69971 Malicious code in preferred-brown-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8535d9a5cabc2038667a723f22807654c370f2c1b0b70b7fce54dbc945c68f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68113 Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69215 Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71621 Malicious code in wooden-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8447e5e3c56fca9d4f014b4556d4f9d12c77f22038738044de77fc3ce1e23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68348 Malicious code in fixed-amethyst-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f1bf92c3027d74632b1d1eb659fba82e6c3a8f815d9ee9262eab62a077219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69150 Malicious code in like-turquoise-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f72bd07a2a3703e929bb5e0f2822aea7b4dfb6b5560ba9a760ffb0863095a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69554 Malicious code in natural-violet-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57948328fcba92e99b28ff4584e01b31b0c9e2d6f42b61364874228171d3c930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few-orange-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b1c8c3eecab41b696b86851346ecfac37e182f047f9bfc77c977d371e2f587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate-aqua-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1b7dac0949d437dcfe21ba18295b461e2565b2120518c51dc0b3b6767196e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale-jade-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88003388837e0a608ddd0eabf74fd573b5df5888cb1cf2c7f32c2fe8566589df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-lime-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b6011a3d7d6c2368eaaa23714613788b6ffc504671f1cf3887af92b5bfbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic-apricot-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c359ab7035fa1e4695fb77133358a40d5666578fc07022b35267e0a52db2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing-gold-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889213d56f78d509aaedfa44b21e33a6e08ed29068b7ebb9aa8d163ab4e144f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-coral-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe79fee1442224d1cdfe1f703fb417ed93335d0c2288732ec83a64173fd1acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy-black-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9b9ec7400b79b433176f1c6a1c1ba21f55e22d30cae60eda0b2729b0af0ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...