MAL-2025-68086 Malicious code in estimated-copper-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e090fced1bc3b2148f98e8582bae050046128dd03886782a78e9bc7c74ecaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66638 Malicious code in additional-chocolate-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc01f35118e2ae6500d1a5b8fccf23ab1d4149dc4eba83326d49c2229b73f8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66691 Malicious code in aesthetic-salmon-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddd9fdefa56d8cfb917e42f59b538673173d341e5a1de6437f11f028f82d35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69643 Malicious code in notable-yellow-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9baf9abaf76efb60a172f501918a23d6a7648f648a1d24c7e2fbc79109da62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69828 Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67278 Malicious code in colonial-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160156899d54efae165224b9de6a63ad9d79c83010fc660a3dbf1c0b4a779de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70379 Malicious code in ridiculous-emerald-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa21c7bc4d07179d25a4f899c3defa643b8f801569f1185721a1fcd1f08c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66653 Malicious code in adjacent-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359afc346aae1c37cbbb589d084f5919491ad657babbff3571d6c8315eb83b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70888 Malicious code in striped-lime-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5758e7024697d8a58d812aad5f954191180344c335fd39662da119717e9c3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-gepuk36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4914afe5bc8c4034fc58159b371050445022764792c4f20224e8dcb264dc1ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449cd60e922486edb58672f2faf36fd8d9c7ff647de14c3a140452126125f5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kembang30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c173b242bcbae9b1285b47b1e030a49b95effa275b9be0eed88367cf6a5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kepok69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88a2f4b930b081ffc5c041f5bd274c83d75b8491a9c7b04369ed2951b50a89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kupat77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c3aa2b3a8a74af06119bd3257e07f2acf253338aa1a9976cb28092439f589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716066ca122358390cb5939bbfa631e309318fbf9c9a5e80177a5c46a6cb7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-miemee46-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf0796dfd0d4c9b0c7a5a60981c6315fb699734964d36c6b38759624a9bd710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-empal83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5f1d03ef7e086e9d6673b50116cf9258a01cfc7231b7917ac53c2c1bdfc72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...