MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67998 Malicious code in elflyyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be746b466eb6d32074ad4c024b8883f382a57599cf0b1d8406d2f379526bc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68862 Malicious code in indicia1628 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce43959cf5abed9e14f4642e48e04e60bef95a21fb8100e7c26ca361dc7c6c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing-gold-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889213d56f78d509aaedfa44b21e33a6e08ed29068b7ebb9aa8d163ab4e144f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-orange-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d6d4e54cd6513574c9a4596e9b1504bfc2c362d3419cd12379bcf1e2a28cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff-red-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa5d5700c6127849b943127fa1c1aba66ace916d36e1cf64f58646a7b13a7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-apricot-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412629b0158b1602c1c84a6007d27f9e4502a403f63a9894093675d65a6357f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69392 Malicious code in mild-blue-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65410d24d64d7a7f7f83409dfecc7a3a17dea1b492fb699fb925d933056bbea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68113 Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69971 Malicious code in preferred-brown-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8535d9a5cabc2038667a723f22807654c370f2c1b0b70b7fce54dbc945c68f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68656 Malicious code in helpful-apricot-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4230a655c8c9f685015ce4ff82e5f5a4a4b4a098aa15837d3d34f23aee0039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66732 Malicious code in alleged-aqua-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd480ea24df9b0bbf1c329bac6ee999198d1a94ed65c126f94d44ad21b2b5af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70599 Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69434 Malicious code in missing-orange-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad0f023e663bdb05ec7c31243516140dcab488c44066ca22e81b69d493db54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68984 Malicious code in irrelevant-plum-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b46b6c9f07a915d1908cb0462ace9edcb6d55dec50eb1ec23e7affc2827a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69913 Malicious code in poised-black-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cea2af0479f03858062e4e9a7d55003710e044c27fa8cfea2406827f898d892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...