MAL-2025-67132 Malicious code in central-emerald-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69352 Malicious code in medieval-amethyst-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce66c5ac0bee9a840c121fe807ea4a8265e2b056e5ac60d67a02503e3be6cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty-lavender-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba67af53353ea20b1d3d6aa0dec79f63735d5989d1efa7dd8d274d70ad547ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely-plum-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dde274ec103e829d99e4dfa960631a143380c80c9292594eb8c4ff7f19b862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome-scarlet-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58905e8c44e490c1d78a2ad156372e66dda01891ce9e7d0d29a24d050a9d3078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy-chocolate-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987b84d257a25254d21bf2ef814314447124a57e0cfdd1051b75ab7e555f9501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70763 Malicious code in spicy-aquamarine-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf609eb7f5e1dc8326629d6d2301bc431965fd167226265c1e5d46e9ad136bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69494 Malicious code in muddy-salmon-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de26ff577cf8f93895f8b3017e31b06399d6a83a642f16dd9420952661bb8f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-amethyst-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0b579aeb2e8fa9917ecde9ee439dd73d7949776104b0f4c93315b640c562b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-aquamarine-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693a11aff62626077e317cad975a8777fdcfa74a0ac6bbac5448af479d6983c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67207 Malicious code in civilian-chocolate-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec1167f5e94b1bfb198b44c75dc95529809fabbdddacd7308ee7a5beb5b6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70103 Malicious code in puny-purple-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48cbf10f58aabd3749f949ad7013330b7d21cbc0451570790c9ada9791b7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68837 Malicious code in inc-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcb835a4cdb793602bffc3af2a71d8f6b49043da39d129943486908c4ecf57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66576 Malicious code in above-lime-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd12d86b242fca88d7dc55f5fbbddb72448436fd45a4a8aa5f449c8c2cd471f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66684 Malicious code in aesthetic-crimson-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c12bb56bace184d324c5207fe72726d18970c5e8af1ad23b73ddf99a75dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66726 Malicious code in alive-plum-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834822e314795ae08e9efcd07bd32bd9aa24e00e89ea308d76bb26ed6e663a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67833 Malicious code in domestic-coffee-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645139da4c4fcc2e2dd80ca9d466dc3564b03e13717665ef6643d5997535a494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68295 Malicious code in federal-turquoise-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675cc0636c9f962fcd1c80a388314fc037e2b04f5defcadc89287df14d192d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68621 Malicious code in guilty-azure-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82d6815420e7d8c3a0dcbf323fb4a7335b3f1e8ad24fe7b4e44876df129ed53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...