MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70888 Malicious code in striped-lime-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5758e7024697d8a58d812aad5f954191180344c335fd39662da119717e9c3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66691 Malicious code in aesthetic-salmon-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddd9fdefa56d8cfb917e42f59b538673173d341e5a1de6437f11f028f82d35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect-gray-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0113346982df8976ba990178d180c7c2bbdfa0154fc0ff4baf5e48dc35f7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-rose-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82e59067f7766d27f22c0c14c15b2e4de8c7a8827d08349ede3e733717bd5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67469 Malicious code in convenient-orange-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81144cf58581c84d2a615fc0b3466e16fc89452f8ace46139c0299f887c61e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71038 Malicious code in tame-chocolate-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1efd451b7d6586b94559ee020d24000712d1d6ad5db07ef43ec82086b8bb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69120 Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71079 Malicious code in terrible-blue-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c31d2f2f455e81c08b320b16525e825151809500f538ef68befd7c01c477b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67733 Malicious code in desirable-moccasin-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b189fa70eccd310cc2970314ea3c67cde21f05fe0244f46239f4d22f283c66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71416 Malicious code in varying-silver-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ba0b3bbeed6858ce4b5ffd4bf8d892460e4f9dc2beca25386dd44029c3c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67372 Malicious code in complex-jade-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815a719b585b622b13ca83a1818128b59319277cbb85f5dbc1326fde0604a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67902 Malicious code in dusty-magenta-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64eda07b06044f0b53fe5243389746549d2964982b07c211da6608518d61786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68176 Malicious code in experimental-black-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce86214385d9ab56677293ef8e4f73dc67e1f02a56418fa7d2f8ac5a5b0b334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70530 Malicious code in senior-lavender-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b496652867d1ca8bd180071f9ba47e27ec65a98e0d66cbf75c6a162b1a400a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67278 Malicious code in colonial-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160156899d54efae165224b9de6a63ad9d79c83010fc660a3dbf1c0b4a779de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67360 Malicious code in competitive-red-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a7fb88689668264e178b923bcddf2185faaa62a48f93aadbceed344913d820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68093 Malicious code in ethnic-amethyst-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d02cd1afa5d8880ffa0bcd4662c36c45e7c0e9302c989fb5abc1ce56124202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...