MAL-2025-67491 Malicious code in cooperative-purple-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37beea0ef6a5a458019fb6c3d65e2912645c638bd2fcd93a86e0a5e3a4b73376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69601 Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71054 Malicious code in technical-aquamarine-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0b72ccb0206d34fa4a0059ea4ada77ed51b3bae187489d4f0f5fdb584134f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68104 Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68964 Malicious code in intermediate-cyan-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110bb9745424c6a30f9d83cdfef2cc818200ac079190782f5d1b585e3ab98461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71515 Malicious code in wasteful-indigo-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78265be9b8cf6135279e2b3b13aa2e89603a3c020e4e9f70568e928d4348d177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67754 Malicious code in difficult-turquoise-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c3364341e8864a47d15cee7b7842ed57e7bc5c54c2d824563fdc1c47eb67c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68497 Malicious code in gastric-emerald-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1113a67f20681729c53efac197a03c46b808c456961a910e84ec6027a29be054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70072 Malicious code in prospective-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23367ec341fa7d5743420f688d03a77b9b8ba1e189513112275bbf4437882fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68000 Malicious code in eligible-bronze-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387c6bbcec344d246523eb5045a18982753d70cfdf226e3968e099dd54f66383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful-lavender-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa49afd90de20de723252bd04bed35e232b2024de8d1e494c7ab9d5d27e5d407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy-white-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d6315cffcab8d38065b1d9962ac64e51abcd83fbe899222a4c21fdb57f0253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset-indigo-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfd230402a7353dc2bed37c90ff25d2275ee7279dda848420d91b8a8d1dc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfortunate-teal-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a4101863f88c1d410705fba8c309ae55a2c7a6adb280f56caeb101c072072d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-beige-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca5ddb2aada85d6113bba08ef4b4679c64b0438db20e0b9beaea61b9fe7a900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist-jade-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffed483ff05bc684b387d7b22411a867498227a11c6ccf8ab8427b559956436d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant-blush-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a0af6cf1ef9c1ca04608cf29f1ad0841cb454bfdcaa39f8d8f3f979dbcc7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural-orange-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a00a22a5963761ed0d5429b8fbb00dd6a8b38115524fdf1280d5a0d062bfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded-maroon-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881641d2a92e89f0192a04cffa0b0f2ff1a657f9aeb6bc36ba149f861ee25728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...