MAL-2025-67287 Malicious code in colorful-pink-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0daee748dcbc689f30cae08ab1c8dc7426eeb1bb490394678ce858aa33df1108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67440 Malicious code in continental-amaranth-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ab873b1dca28b41f83cc97ad3dd1217640227e86f74aa457a391bfb37f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70457 Malicious code in salty-fuchsia-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e0569c808fa2f1ce018cbecab66160f528228cc813f09fc453e9a66a67479a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70223 Malicious code in realistic-salmon-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6182fbc0961331903bf47a5def3f4057d85647ab5c6343fd745c94d8ff6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66860 Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68870 Malicious code in individual-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f164af61dc4ba6a5ace4c58a383ad84235ce221a763ebf189f89783d25299d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71679 Malicious code in xenophobic-purple-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece29cfe9a6effd409d6c94fed03cc1a96b85ef5952eccc192f87b574e4d004a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69591 Malicious code in negative-gray-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078412383c8d93120bca3a4dc0acaa725b6a8d55970573c3e9f56b2ac667b781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent-silver-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5146524a5491b8f8b5b0d7c09096983c8cad001e274ccbbf4cd31e4e6fa070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71755 Malicious code in yummy-plum-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73aa7a4244483f3e5ac1ee04dc75283883ed1934bae763ee7a7aa64b6afed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71353 Malicious code in upset-indigo-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfd230402a7353dc2bed37c90ff25d2275ee7279dda848420d91b8a8d1dc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67189 Malicious code in chubby-gray-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e9bb5fb61907ef6fbf7a1570c87e18dc26d07c55189767561aaa3507c4ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67925 Malicious code in easy-aquamarine-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6c18c619cd656688d7ad731fb0fa6cc8f706853a45b7275c8b2890e51b6cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69498 Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated-plum-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4cc5602110887b833f734dec3a67c46678a8a982b0e607e4434b2d330c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66805 Malicious code in appalling-teal-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612fd801148ed5818c5a011418140b35015894a1a1726ef58fe74f9622a66856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68499 Malicious code in gastric-moccasin-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f942d8fbf7308e93279ef1a7a10e6eca5810a76ce074acfdfa3c4c6abcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67272 Malicious code in collective-black-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba28f57509daaef6f5f46f42995d30a516865e558b818eaf4b07c4edcbb4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67036 Malicious code in bottom-white-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86053435bad461d822944e119a6134dd7a3b29a7c8f7741ce9842e9eee650272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68812 Malicious code in impressive-azure-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d8dd8fd94701f7a24dab950e00596667f85388818ad4c75fbcb6a4ca141531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...