MAL-2025-68001 Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69864 Malicious code in perfect-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416d23f324b0978398afe760b31f554fcd5bdb60a1a3e19cfbee364c83e3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71679 Malicious code in xenophobic-purple-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece29cfe9a6effd409d6c94fed03cc1a96b85ef5952eccc192f87b574e4d004a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70978 Malicious code in sure-beige-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ed5f7db586d2a3153fa877899c36a2f041b847334dd67353717a9c55229f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68589 Malicious code in grieving-apricot-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a7a34f3a22929204072dbb68142858925c962734e7a97f0c5639cd870a9508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67123 Malicious code in cautious-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb927e3912bedd6129b6e72b1c39e04eee32126566e8274b0822ae83946c7b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69918 Malicious code in polite-amber-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb50cb1a15dd90fcb90dc3bac7530e6b8b2e9dc409d48fb85bbd08b675ecdaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67021 Malicious code in bold-brown-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299a9c72879f97febb2e0e99cfc9672a065dddcdc8bd89c605588b5b75968e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70339 Malicious code in required-cyan-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9440806ac65f71d8f4f13d191df38c4d776e0dd578bed3a09d67ac1e60e4adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70457 Malicious code in salty-fuchsia-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e0569c808fa2f1ce018cbecab66160f528228cc813f09fc453e9a66a67479a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70704 Malicious code in socialist-lavender-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4509e3074331b4dc9d6b8d4d62aa4e51bbd83701775ec07ddc9aaaca0a4e45fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68499 Malicious code in gastric-moccasin-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f942d8fbf7308e93279ef1a7a10e6eca5810a76ce074acfdfa3c4c6abcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69182 Malicious code in little-emerald-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f797c299ca1bb690f88424d130cc2fb755517e8be7799f4bcfe9b2cf52c7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71364 Malicious code in urgent-peach-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d609d2d155bb402e768b17effa6fa4c41eb5fa84cd06bd51848147c2e9a1163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66796 Malicious code in anonymous-rose-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d6d0e18cdee45c51e2fcd1e55a045f9e202224d05377f3b2c4c44c725eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68073 Malicious code in equivalent-rose-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da82e72c4315d982aee6aeab4fd387972ed302aaf02618d128a4aa8a3819d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69005 Malicious code in jealous-pink-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af975233e1b45f4cc58624b54d559066eecdcc7838f0f1e1cfcd1a77d25eac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67852 Malicious code in double-white-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ee54e34234a6ea3fc8cf485967ded4454dbdd0283361708d12c13966936a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back-harlequin-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbaa3e1100db20ecfe7f2829a4ec47d3c5b5340fe22232a1fa696af052ce75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-gold-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2218784cc7075d10081552114bfaff01ecb4722a47dd8182d4e4b8152fbd6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...