MAL-2025-68322 Malicious code in filthy-silver-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e6082061e4500be59c888d5ec79661d60c3a230556e7e9bb62e67d8e7a36ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69781 Malicious code in outrageous-crimson-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e316ea03ac81c7e1dfd3523dcf00b64023c38ef69e7eb76d97082ef7c56589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66739 Malicious code in allied-gold-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8853c5cba4d87649bdd688a55e4521666629cb028433af29f15d83ffd9ab578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70467 Malicious code in satisfied-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24e6355364ffbf14c639da3d3ab95928e6a0167704f22fd63935c74076a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70165 Malicious code in rainy-gold-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba2e47d83deb028c2eb11eb6f0d0b7b0ca70077c3ea41ef8796af08c1857be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68891 Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68354 Malicious code in flaky-blush-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431769404a9a8f35c84ce32881d885e272581911b60c40bdc8a75f8b544a562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66837 Malicious code in arnecx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0890fc873f87e37d5296c5f26e0e7d194277a2a589f0848e17850d7d4fcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71661 Malicious code in xenacious-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f769e4fdd870fc90cdaa64d7fed81c305ad4ecd812b5c4e105ad6cfde90c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69744 Malicious code in ordinary-scarlet-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f90fff1ace1d288cea32538aa9bfa10b25ff1caf18dff79c1893c40656cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68924 Malicious code in intact-beige-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f40bd00df3fa14afd0e27eb130a607639db01e259743e98838e97a8d424ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66596 Malicious code in abundant-emerald-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfc002b9f96067997002d3bf313df8983692de21ca53a8743048fae9a30ab24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68578 Malicious code in grateful-maroon-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b3dbeedba4c5d6ba4da4663e452dc28303cb97064310150be36cfe44a1e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68097 Malicious code in ethnic-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40476612ad0eb2558d83062c4243dfedd71ae383b311f90f599bf2cfb552f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69521 Malicious code in nakajio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b3e418efa6d722ebd2fbb14e98f45494bb15da905ec813fbddcac9bd57db85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b32c6a3f358c4252a5fcb7523371d25da02c59293169cc3411d8243df525ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68685 Malicious code in historical-aqua-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c12aa59ed503981f956a6706c77f472f9fe28374e7bf39a7234a4ba5c745d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67038 Malicious code in brainy-magenta-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f59f32491305de009093e0bc98621e3132083219767f593603caa6a098ad18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite-coffee-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb01ba1fd92d2f099bfb1548b851710688afbef4669cf71691c438814ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...