MAL-2025-68650 Malicious code in healthy-copper-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a27bda73ac41d9a5a074a7eaecda04fa99e348444c37daf1862818d1fe4364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68127 Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67099 Malicious code in busy-bronze-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319d48c23d38d49cb229c8b2b17016be121d4c0add9ce422e41fa9d13226b7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68595 Malicious code in grim-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbad8a54e8e2c7291fd59b975fba5b4fe06f00acb3276aa0cd96d3672fea42f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69891 Malicious code in physical-sapphire-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad77ed563c99d336f3278f134c27480c3512faf2127fc6bf8556ee20e3bbb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70292 Malicious code in reliable-purple-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6646b22c5e66eeeb9121ff5987fffa05836d1b8784f79ea3bed543e9744ba250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68763 Malicious code in identical-apricot-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a06cd7093fb4e7948ede8ddca84a403808c0c537e6272c69f13d5641d0746d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66960 Malicious code in big-amber-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6d0edf6126a0426cbdd9428c728cbee561fcc5f789245646a332dcb81c0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70315 Malicious code in remarkable-copper-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c3f9d83e5d2d78130d8059de0e25fc272730968b3b8e037bed916038dec3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70056 Malicious code in prominent-moccasin-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed58e694e074fad1631040ad2bbdb3885a9d18dcaafde0e6f1baaa4405e4da7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69763 Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb854086fbe4c5c275ea1a6c924e4d77d04d2d461b9e2b7a92624e10644dd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-harlequin-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfc8a1d5caff97f46c2f8d9e3b7b9e0d05430f7d839bdd0f5e7df0c38f2c245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-cyan-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d925ba9dc3c158cf84bea619a8c8dd7bed8e24f37665c762b5e47a245eb352d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-sapphire-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9d71f93226fd1a3713fb3e6bffb5172c666cd3eaf208db62430103d382e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy-violet-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25d400cc642c381645aec0ffd1ef6ed3aa3c3f3b029316ebbca2c6c49290051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...