MAL-2025-67558 Malicious code in crowded-blush-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c12e84617f4ef08f50f62d479e045f9f726d030cc1fb3ba83c6677c6b496d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat-yellow-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20580633ff3a1b9a51dcb838ccf22299ceb266e23647c46b5514256dba754be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean-apricot-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dba1ca0b854348f73cde18ebc5d9ac69e278932bde2003c431311c8904f0d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accused-tan-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd02dd5c6b18506b9dc7d77fae21f10dad793858c091b75857bf350b63c141f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68548 Malicious code in glorious-aquamarine-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3199eb1102e7cdc6644a53af53841abdafbd88403f0b306755c2662060482348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69881 Malicious code in petite-fuchsia-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241fff4b2356bf7232b4d49c192332e14093e40d9a24a55c0380b75f117d75c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68771 Malicious code in ideological-azure-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f4ffb7d7fffb9bcffa675a82262c43d8f15f84ba5f5baaecf5a817e5ba13ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70508 Malicious code in select-lavender-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae591d8b12718b5c1b31022d64f8259285cee722fc11710e99468418e93b24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67089 Malicious code in bumpy-orange-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4ecb1da48175d3be0dcb4391fe19e75a11b55818129a0cfdd41ec738ffd9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67176 Malicious code in chosen-jade-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dd6d2fbf332a3310e35b042fade68d07ed938ad90336e2d4aabf7303df10be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71108 Malicious code in thin-aqua-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751c9db4fcabf66799112090ce9acb103f9bf6fa6a4e968674648408635c6682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69856 Malicious code in peculiar-amber-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa0c652dd015072847a6a59bc198a8aab719d51a8020d8a47eabfcd416dc155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67879 Malicious code in dry-blush-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281a22366216d332741092eaacb47f80447745047113728180858f304ba9372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69502 Malicious code in multiple-pink-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd96db17690b8d5fb17db5472dd6daba6bfa88c7eb8a6e73e84c3bbdc279f5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66894 Malicious code in average-turquoise-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c405123fd1d4422105e04885994ca3f4a1bd19f50b50c68260e5ba4fcf77f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate-amber-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b5590d65bac50eb32949cca62471a32c40282f80975682c648ba6919fdc3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68167 Malicious code in expected-fuchsia-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb6e0368176708c17544b8a0b9c5b8b61a3294e29e8eb6a506cead781e7ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71115 Malicious code in thirsty-olive-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81be4fd32283f06534895306ed6809aba0667d639ac705f5b966874120a2052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67746 Malicious code in developed-violet-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242be05553a7bec07f18b7a4a76cbf29ebfe0846a5f2f4b4fbd1369b82794620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71626 Malicious code in working-green-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3068ffa3f2db4309647cd36cb75cce7a4ca2523fe07cf7bdf8057ce0923a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...