MAL-2025-67175 Malicious code in chosen-indigo-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd0a3ac28e00cc5fd787cf4c358d04675cf3c86acfd4add96ad0c2cdf56d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68901 Malicious code in inner-coffee-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb43827b00821192d87d2a4d4845c49c20d444a2340c9207a68c747d14b9e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66645 Malicious code in adequate-apricot-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9af5f501e85007259915f179c4faa7daf0d29f62f162369b706ce2f8aa53b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69735 Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66947 Malicious code in better-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86a37b8840eadf6ef74ff1d3d364d711427bd0a7c5fc9a52652b12b74e7ea3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68951 Malicious code in interesting-gold-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1b0c7b2f6c50e495e05eb1fce1e6c6e892b8eea7d89107a0049a78f74977be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66746 Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69451 Malicious code in mobile-scarlet-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c14a84fb9a6701fdb752cb9e968e7b6bc8dfd4c675729f3b6f7b352c2b3c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69984 Malicious code in prepared-lavender-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad097a7c78c3365b19f5c6c2119ad0ba2ac1d43dfa734457ca5066fcae35453b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68403 Malicious code in forward-coral-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163e4c6e52845a94770049fbce8c5cd88195435dfc76afdfc3b66decb1a516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70043 Malicious code in profound-gray-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbd0fbe549adf9cfbf2db3df1f64377a2540538a34b3a2243167ae9f9d12805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69178 Malicious code in liquid-rose-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2032a75900d62138277f29e121cc7716745c625f4dd2ad48c4c1109be07a146e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68001 Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71045 Malicious code in tasteless-coffee-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c528b17efefce5e949e95d4f64236255a17876de0144cc4f7f337e81d4141f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68346 Malicious code in fit-purple-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40acacd93b31e88dc7c65e3662fa1fa278185d6be3aab310bb7cb72b570bf69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low-blush-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbb4f7ed4371db5d697bf33e6ac6b94545283a8118d2b95a848e3f1aa6275b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-fuchsia-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dca9f181fd031d15806dddac0169ed1ab12517f89843f8838a101bee31d8207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-black-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd1f9c70907a2bae1c05ea4270a4048e5490023234e23911f4705d98583a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-aqua-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1803b2a8cadd50c82d1001e1d6229091453a5a29061f1f709509840e982c488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...