MAL-2025-68154 Malicious code in exciting-pink-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2c78cf2e1d46d7790981a1079c9aaad1a3de138326e1fb0707a8f534f0cc6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68168 Malicious code in expected-silver-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445a257feac6823453ea3c2e51be3484a514bd08161ff1c59b22e83a4e4c1397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70290 Malicious code in reliable-lime-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f5f9716b4b12569fbf32e05546a1f8343d01460ddabb4ae588e6c3cddecf64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71732 Malicious code in yodelling-coral-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508578254beb55812a524287bfbd102141dc41488ea6dba0906f99885358f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71138 Malicious code in tight-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b667714801dbd50a93162fdcc91eb405474a4a7dcded20178ceb63c415a896e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70513 Malicious code in selected-tomato-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c818ef8c96f71b5bd5f5e247edb25ca30cbff584daa0107d3a581eb908e924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71221 Malicious code in unable-rose-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67087 Malicious code in bumpy-maroon-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2c1b1fe29ff898d9b17478a847a6f1e446e445cb30df8e02620efd17e7c9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71550 Malicious code in western-azure-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c566e7c2fc66013bef54176f1fca933930917c7d211b0199d53b586d18a03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66812 Malicious code in apparent-salmon-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c208690ce22f7cf92267112eee5bf1b40d0bb0c5617939a887aa078091a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69637 Malicious code in northern-scarlet-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc1b88675d12ad22f57a0e5e237a1ff6a99b88816417cd6545c8ed1a9153ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69039 Malicious code in keen-jade-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47723cc0ed0ed7fbcb54ae27dd08d5d820d18c5b480d0e637fe645b5b342a68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69590 Malicious code in negative-copper-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a86b366a95b8e1e74d1f4d75b580ee078211f5594315c90e39fc25725aeb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67678 Malicious code in defiant-peach-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42111608494ce914f66cc762b51cbf246b81e8531db1e35fdd132ac21d59665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71660 Malicious code in xenacious-brown-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077a3333337b68f25dde653dd44db3b87cf459da835d560f6d0d926b52f839d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67998 Malicious code in elflyyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be746b466eb6d32074ad4c024b8883f382a57599cf0b1d8406d2f379526bc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69549 Malicious code in natural-ivory-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d3a96c0f8e2bf9a3c032b2644c04aa55e31ac0438a42419aef0370e4c5246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67765 Malicious code in direct-rose-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eabef9e4528b0703f8da8a80686dd829da3c1a345d6483a15f39c5264831d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71332 Malicious code in unpleasant-maroon-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1d4292c1a80131ddc88df43c14f2072e884718f615a1897bdb1ee04b250e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...