MAL-2025-69067 Malicious code in late-maroon-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1952bc3a6b79bbb9d86e49431a8e8938b816a3256f5b9b2ff21f8a63fdcfec8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67398 Malicious code in condemned-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67442 Malicious code in continental-coral-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7e5bed4cc7668cafdbc2747838c8bc41a82ce8eabff2b96853a7a6585e5efa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71032 Malicious code in systematic-turquoise-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5189f884cfe7df5c9d999ab89b0f5c060e8a4a3deac4ecffc091266bdba9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70336 Malicious code in required-chocolate-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11de199fb725cfa12229b8e24315bb84035439be1e175af2bc9f5c121d56415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71012 Malicious code in sweet-azure-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f4b91e014f29bbcfae31e45806a7403db73ac7d4e93348f60ba5b171e328e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68991 Malicious code in itchy-coral-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3533158e6d165638d55d9ae8f050d7e5f8e9b86f62ee2ebf223c1dc2c089056b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71742 Malicious code in youthful-black-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fb39167332bdcc8edd883c1ad7902c38cf08fb61b6c6437f2e8488d935168c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68801 Malicious code in implicit-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80713ac28a0a287d70171707490645760a9f94c8c115d9159082276af4f8e802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67912 Malicious code in dynamic-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898cc20dac207be5f5e597c66540510fd4de37910630900b6c2a9491a94a3a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67490 Malicious code in cooperative-brown-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85ba6dfe1b77e54e75514ee4d12c5f09080c9cac4c7f91ea33f76be9fa3e7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67983 Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excalibarx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5432f48f86ed6741ee63abe7aec152cc2be52fb010f7339e0e8bd5ef3021f711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-orange-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c681d94454b32eedc345843c9a224d179a8e8d61279f4ece84085a3503b6f21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative-salmon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ea7a48712e7659e37c8c0fed2970990a212875866f0b3e418cde7fcf18c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sowravyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf552059b71a4919fee3126b1563bb0b026350863c16f8f3a08d0950ad17607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative-black-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f1e4954bfa2700db10200c4386536e411a3aa9de21a23a49af95b93ab7a9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...