MAL-2025-68497 Malicious code in gastric-emerald-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1113a67f20681729c53efac197a03c46b808c456961a910e84ec6027a29be054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66844 Malicious code in artificial-pink-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92e1dd8afce1c2e14643ce496e6d76890540d737495a0c40711a0e9e916b1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71378 Malicious code in useless-amethyst-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7615b7562d0196f4f8b46c7bab2f356fa89a648525a96a2eecabdb68ccc966e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68672 Malicious code in hilarious-fuchsia-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51eb5a4fea134fbf5fdd74c2192c26cf56e7aba0aabcae7e9b9b2b1b18f5ce4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68638 Malicious code in handsome-scarlet-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58905e8c44e490c1d78a2ad156372e66dda01891ce9e7d0d29a24d050a9d3078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71515 Malicious code in wasteful-indigo-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78265be9b8cf6135279e2b3b13aa2e89603a3c020e4e9f70568e928d4348d177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70072 Malicious code in prospective-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23367ec341fa7d5743420f688d03a77b9b8ba1e189513112275bbf4437882fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70410 Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful-tomato-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c21914b6a4f507d21c21eaf45412f09096cd8942ea5b956edff81689d891fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-moccasin-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7116cf3cca47e750372c804d17d43767c637f19cd73914c1866a3bb7f60c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67741 Malicious code in developed-amethyst-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b1cccc4e10dc3fe415a27aa22285a79ddccb3a1868f2de2b66e2844cb4ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tepsimoba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceed2af4f30ac6875bb80041915462110c44c957d39d85fb9afcd45302e95c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-green-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29936a485d34d73872a7532d9f1be19c895616ae7926c9ff91f63961670fee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66583 Malicious code in absolute-black-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607d913ff6bf21a8825746412b98c1a6c971946064f92486990e01762980858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67209 Malicious code in classical-aquamarine-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64482e0adb352d7d09cf79aba8eeb20c513d1bfa891655b4e188668a5fc0aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68167 Malicious code in expected-fuchsia-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb6e0368176708c17544b8a0b9c5b8b61a3294e29e8eb6a506cead781e7ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68152 Malicious code in exciting-brown-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98c1ae528a9bc92aa305a85eda314cbf1c48a31bcb4d06a25e76b50db26b9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69785 Malicious code in outside-blush-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb585e2534df279668c244fa648dab02c569261c227ae04ac2de1c83c302b6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-cyan-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e470f2fbf3c99892442887e6aa50b02776a322d6c623bb41d1f0c90a6101b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake-orange-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7a7d451a9a3d9be93b378099ec4a567e024dbd5ad9edf0d1cfc410bf3605b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...