MAL-2025-68812 Malicious code in impressive-azure-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d8dd8fd94701f7a24dab950e00596667f85388818ad4c75fbcb6a4ca141531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71340 Malicious code in unusual-coral-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acade8225a1059f0339a9b5e33795261cb49cdc30f454f3d783fe782bde1f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67672 Malicious code in defensive-purple-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad86837ea4129c2d11fb21af600ef2be7a665093687ed76e93781772a9314e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68145 Malicious code in excessive-red-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf2a52d6ff6f244daf287d5c529b0912f517d8e2a95757a2c444227cb208f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67671 Malicious code in defensive-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5635a35573ffca90811fb73666f2b012a7a5aa25b05950bbcdd6c400c44f7155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71280 Malicious code in unfortunate-emerald-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768e8fddaf8b6ce129e3ef011115e0cb94748f495f2df1d2bce1ce2dc5b99cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70041 Malicious code in profitable-tomato-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c865667f7aa79c8c5377d38db9281943b1e983daf9e4926ad3d6ce2f9495de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71306 Malicious code in united-blush-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9a6095fa00c3e180e7328d85cca782eb474a12ec8c5aa558c8f0f45dbf55e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70268 Malicious code in regulatory-harlequin-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4968753ad38701ba2dfe12d95e50fa0c65b03487d7b4e6f8539ab31338e596c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67344 Malicious code in compact-tan-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1eaa4a5769b86112d4907fc6d4b8ea0029f28e2fffede09a6107409ac61dda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67864 Malicious code in dreadful-aqua-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02448f120ee0ca9d388a083c5f36a47502dde97577bcccdb293dda50f96944cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69423 Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67036 Malicious code in bottom-white-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86053435bad461d822944e119a6134dd7a3b29a7c8f7741ce9842e9eee650272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-brengkes98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc51ddb2baa0dd98b03f646e5b4091a507ce47db85ac640d70f594049c1d432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a2aeaaf2418ee64e598dd9dd66583a1186c5ab85e4b2ff12570a2d64a25216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d148446758a57af28b940d1b97e5618b839b83b6da9372cd6832d5cddfcca80f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lapis52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e12969f98689a037790bc5230c3aab38bfea1da86e6ef6a28258d734dbca81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-oncom94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1aa3e747c27abb29afffa7d7636d5bbb87a8155f5ea077843d5d035106adc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-teh87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afb0b2f34b1886b07edffa8171cb456bc9c73527a2e431d7cbc873b7efa307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-takokak91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ffb331edbde830bd2635c3949310bed522554604e8ab983940f6dc5971413ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...