MAL-2025-68741 Malicious code in hurt-aquamarine-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d639ab780f7d703fa2d1acae8ca34701ced21d79f8997e8f70239b771c3863c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66573 Malicious code in above-beige-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d689bdc49f4c3c2908b88030acd8bd522a89ffa400e01a7375ddd928e9c5856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68846 Malicious code in increased-green-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf3d329e2dd8d96640f09e937f9e9728d5bf8e7fd3d9022a9cc210d46ba5d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66576 Malicious code in above-lime-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd12d86b242fca88d7dc55f5fbbddb72448436fd45a4a8aa5f449c8c2cd471f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66808 Malicious code in apparent-lime-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8a038ade898b7997a21e5ff5622600d43f730b4742d8795e141225970b4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69494 Malicious code in muddy-salmon-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de26ff577cf8f93895f8b3017e31b06399d6a83a642f16dd9420952661bb8f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70764 Malicious code in spicy-coral-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1583c0be87b4f163e8a941fd299b18d6ee90cb755d084f95cbdf33134d5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66993 Malicious code in blind-tomato-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ab5387398377f8fe5b26d3a451a47fa90b026af1b29dea1aae3761a18eb6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70780 Malicious code in splendid-magenta-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93e5d888cd2fbd2a767ae8ef95bb231814cbd1472855088477bb4ca249a9045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68484 Malicious code in fuzzy-amaranth-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa424bbc31bec947e42bda53311126810e21981828bddcd20b60c1040a988797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67833 Malicious code in domestic-coffee-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645139da4c4fcc2e2dd80ca9d466dc3564b03e13717665ef6643d5997535a494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70103 Malicious code in puny-purple-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48cbf10f58aabd3749f949ad7013330b7d21cbc0451570790c9ada9791b7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71026 Malicious code in sympathetic-rose-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bd7f698af77d5ef537c312bdbb86fd34cc7e3e25071036e954f329904e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68295 Malicious code in federal-turquoise-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675cc0636c9f962fcd1c80a388314fc037e2b04f5defcadc89287df14d192d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70763 Malicious code in spicy-aquamarine-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf609eb7f5e1dc8326629d6d2301bc431965fd167226265c1e5d46e9ad136bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70538 Malicious code in serious-blush-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2186240116c8ad343d24630dec3be48f8105d0f3b2890ad19ee5d55b33fefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67132 Malicious code in central-emerald-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily-crimson-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661810b736b38e5ed2217a324979ab4a371ec308692538c9505cd241a488d3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome-scarlet-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58905e8c44e490c1d78a2ad156372e66dda01891ce9e7d0d29a24d050a9d3078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capitalist-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6d0d57300ef72003c318f75d9e83d3482318e2be9c902f77424f24b90f0263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...