MAL-2025-69629 Malicious code in normal-cyan-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb5f609caf52e546410eb31d954d6b07f9be422a3a71a1637f86b02f674ea0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70430 Malicious code in rubber-ivory-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b502cce52e2a9b8559899bfe3e926ec88418564104d884ebc45fc7f53a07da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67380 Malicious code in comprehensive-peach-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7400538e836cd22c57e8c1e72ccb047ca588e06f6681a730bd6de4cc977dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70472 Malicious code in scared-white-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b511093396a478d5cf489a22a5e39f842233e67ab11c0dc82f93d832dcecd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69569 Malicious code in naval-pink-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c3278f2135551a4f1647b59c02b49870cc133d436ea8577cf18d2c34cc4604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68102 Malicious code in eventual-gray-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55931deab3ae0ae5615438af685b8011a93a79bc7c3f8ffda4360bdb66e9a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67096 Malicious code in burning-red-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78abaf0e74f03764c4be1c98482848d5f26cb929a388e30220270ba69ee13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68927 Malicious code in integral-green-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2741f721690a7673d9a821f68a28d09272b673b1f1ed7c70be4f5cd90316c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67750 Malicious code in different-coffee-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa81f9c14d6aff944c400d9139194ef32d9b1c268eec2c87b74cdf57f5616118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67206 Malicious code in civilian-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0902ce3981d4280a57000cf5222fbf3cb73197d87c3221baed691af0ccc3cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69725 Malicious code in opposite-blue-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9d304ca359d44fcff19a25fb5dd3f670b372bfcdbcc0630114a022344d1a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-aquamarine-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e225eb85e151d8480ba213cf1fd3077a230e37c88833c8af6c40d893d8a2c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent-emerald-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e139d010544d6ce076fe5fe1b582637f4c4816c945f2349d0f018cfb02f0bd21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national-turquoise-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dddc68b828f992621dc3ce6210a86f67c0fd1a20a84713ced490cb49f407b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-olive-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ac10842dafaac29c25240868e9f716fbc18a8e4e8dd28f8ab52982d5363227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite-coffee-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb01ba1fd92d2f099bfb1548b851710688afbef4669cf71691c438814ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68891 Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68097 Malicious code in ethnic-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40476612ad0eb2558d83062c4243dfedd71ae383b311f90f599bf2cfb552f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69521 Malicious code in nakajio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b3e418efa6d722ebd2fbb14e98f45494bb15da905ec813fbddcac9bd57db85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...