MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71408 Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71119 Malicious code in thorough-amethyst-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0397318b7b2fe19b02dc65ba5d0e83dfcd6ca2adc224522b9bd51e03bc6d229b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70465 Malicious code in satisfied-aquamarine-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb98ca04511525550de5ffff3d4060af4c9a48c61afec738856f4fa51de21c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71066 Malicious code in technological-olive-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4842d4e25bb9f194a482745f542216c9ac2ffbf6a6d04ef7e75ca862dbea2038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71333 Malicious code in unpleasant-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23be83de8103e298db4c796d0fe67aacded5e99439f0a72b4fa49124ee1a459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68263 Malicious code in fast-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb29ad868a03e9ddb9a0d3cb0c2a305b56894e389f049cf6f3acafb83a9bf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70609 Malicious code in shy-crimson-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c72ee236a89fd80832a38ac814cf8e4f8c2a3f4277c7aff3a0af2cc68386a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67091 Malicious code in bunneby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5820cfd0dccdb0254edffb9a5e8189cf207068c5def25bf81d048eeae5b8a5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67909 Malicious code in dynamic-amaranth-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f97e59e11d882fec97c81887ccb9983f47cd319474dfff85f8e9fd4abfd099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67642 Malicious code in dear-purple-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6239f93fc5a58bd50a5360c984b31a38b12effbf738d88cbffe9d489a0d27b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67450 Malicious code in continuing-apricot-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a8d62412e7e262a9f6ba076dc6d37f4f54922879e7656aa0ebea3062d7910f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66620 Malicious code in accurate-violet-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b106f09b5e95bfeb75c485d35e31f11efeadf543d53d6ce9660e8b3cf22baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68518 Malicious code in giant-amaranth-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31af5f91ed41dd1b5f6b4003f13d447b3c59c6a6ebdd7a597b853a4a14cde53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69249 Malicious code in mad-sapphire-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016ba71d837c76d976017acd082d0336a151fbf8e277c8b325ca36afe78b8ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69702 Malicious code in official-pink-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5000e62f06106ab11742d94e64d45a09a2614570a774a4e9ca73c455ac0d1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-keraktelor2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf578ba627faf705334c6deabbeb9ba78e884e2c8675fe31c016f7f5998d0bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-kolak20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd276b1384d6d203825645f44202fd69f22445919446efd1303660df6458745e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...