MAL-2025-68808 Malicious code in impressed-bronze-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a2adcb1a0e27872b5e4d3a1a845ca77690608003cdd25bec42db4a61982dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70712 Malicious code in sole-jade-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df6dfa2e0050dac0a8e6606d0181dae90167f3fb07b74e226fd3c95376b1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69700 Malicious code in official-chocolate-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9802dc82b8e685ef80e979e433f32ad19d859031ab4506373d24bd68d3c92755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66565 Malicious code in @bipyruss/radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7b7af17b7b59d66edaadd9aa13195e7886b7e23905dc09eda5ccc360d2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69077 Malicious code in leading-green-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c4672b4626690401117fe6fdac903a5be244b1679a2bd09b81972b56a6eb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69162 Malicious code in lilysuesu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7fde76e12d7b6be041acc86adc1a7085af7bcca0b24d874c16467df99dd751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70184 Malicious code in rapid-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2f75a762e444732be5572f2bee39c7031cb938e8169b6d4ef94f7a11b4618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71230 Malicious code in unaware-gold-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b2ec55d6993e9f0f104898e92c211dae3f7d54c959466a815b88da2b48841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68166 Malicious code in expected-coral-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe22b3f8653ae7c9683ecbb49cca33aa42272237118c7285571e9cf68c6950d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66631 Malicious code in acute-coral-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94ff038c92cee08ecc4449683b44005c35352944afbd96d38351ee85bda4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70784 Malicious code in splodgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635bb69498e19604f01e9fc9b7c6651991ac9856ad03fb2bb55859b342c0856e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69707 Malicious code in okay-jade-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1145f4b6460cf1b857bfecc6f71b9ba9a3b77847297ba5eb1d76b580c11500b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67097 Malicious code in burning-teal-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05965a757c2d1efadc5f66913ed48b5bf91218ee60ac9d5d6d4b89fd169ced63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69672 Malicious code in objective-orange-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c67f102df9fb75fab419ceb98245d11d1c0b6307b7ef3b6ec6abcf89f0f590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68032 Malicious code in encouraging-maroon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92871f00ca29acf65d8e3b37e198171d49cfd66eccdcdc9e0f3247a5b10bf915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71286 Malicious code in unhappy-blue-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0c297d6589646cc19653d09785ea62e811693d0b9d457a2f23d7be775f3f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70350 Malicious code in residential-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8021bc028659f460cf303cbb57879efe8a03c5305fac5e0e863656863ed3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69754 Malicious code in organisational-coffee-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67ac3c0e56dcb91798049a350fce5eebe71a00c3d3908094079d9cfe2c8724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...