MAL-2025-66840 Malicious code in arrogant-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b6c767d5417558bc30feaf7299a5b8aa918a1b3974c20fa91c2db7f8c1f794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67698 Malicious code in delicate-lavender-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ebd5f6b7895626148808abcd74ff4e91239dd64c538a86ed7ccfc04b1decc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68647 Malicious code in head-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1630ce5f871b68f8a07f00de0d731644765a008c85ec02b6c598e561d89827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71335 Malicious code in unsightly-brown-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b143ce9e77d28edb28ee9994844f9eaebc88fd306e41ed944e3f79925ecd7e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69469 Malicious code in molecular-jade-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f5436e2e1ac7530de2199d8e773808e6e697b4c24350916fa155a99451bb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67991 Malicious code in electronic-amber-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22e2e1db8bd222c9a6e0147fc20af4d7973d1f81b233b5ab0c7d33b3452292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69090 Malicious code in left-teal-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703508c9f619bee348c268436cc7a6782d6e1fd82a3e3cabdc7f45049bc7130f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69745 Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69659 Malicious code in nursing-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a70d5e69b020f526f21497cc1cf01cd8cc42e78700b488516276060e069797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69680 Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70989 Malicious code in surprised-white-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb42abe5dedf95bed57b1a4d6cc51b8c6c795e1064ccf7d0782277a64069d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68077 Malicious code in essential-copper-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6553e3185c461d94f9d1823461fa82e2d8b2362e7d8930a215129499550d7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68613 Malicious code in grubby-moccasin-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9cf33eee48287783a1a38f7f919e42b1b2b3d3a792fe1fe2b59a3405f73047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68695 Malicious code in homely-harlequin-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8af9cc1cb65990fb888c3dde03693ea9845f022365674b37107b1bfad125b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy-indigo-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba42e54960c742ee24c05c22e1ce6a3edf32f765b3d74863a432298ee9657a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious-lime-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9e4111f5b9862c31b13fb6ae60bced740193fe0b07264e7267afbf32a1c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile-yellow-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dad08c988cee85c53edaa17568b8f0a6b6074623554f9e45c3e6863fd1cc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-copper-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff816eeb8ac3d290a2a4e43413ca714ca6ec56d4cf1bc584f0d4ea02daba01e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nonkruck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79929a5bce07a228495a5645261327e0bba7990e0403b63149930e5b26e55780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-green-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272fac395ed048e4b4912a4bc15bc530d6f90e4f953123d2a78b6515b78bf641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...