MAL-2025-69190 Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68026 Malicious code in enchanting-turquoise-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234689944a502e4eb3cf26411ab53ac99f308dec1f3514248a40c224dddd3164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67981 Malicious code in electric-harlequin-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e979048cebc77ac919b9aabb55dfab63613acd6cb7c465c2be480d4d9438e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70674 Malicious code in slippery-tan-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cf977953edebe764a9dbf7b172bb7f0714b2342b1ef513f04926f7f4f872d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68762 Malicious code in icy-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ed23d60a636f5d1d228f2e1c5e8432066e3f629a30d9c9a255b40251301a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69658 Malicious code in nursing-azure-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1249bcb713d69512c7709732a469750bdb860ca642a63e72064aa6dd909e467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67303 Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67509 Malicious code in corresponding-brown-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140f0f0b23309eaa3c89c6004f5dc95eaaa443a55993c18be267de7ea1cf8a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71286 Malicious code in unhappy-blue-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0c297d6589646cc19653d09785ea62e811693d0b9d457a2f23d7be775f3f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68895 Malicious code in initial-purple-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b9d9f5f99e721c6dd6a4832f73f6d6d4a0d8231fbd1dc72f2028d48112ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68133 Malicious code in excellent-beige-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf8f4bb08ce0fe167c7331ea5214f11c5a8238fa013f338aa8ff94bf7c52fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67720 Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71183 Malicious code in tremendous-jade-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63a2385372e4ecdbab4226588e0dbbc4646ccf651dc125b6147957e847619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67258 Malicious code in coherent-chocolate-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8252d5d1c8d869354d4c2f759483dfe611a63eca1ce6ac61a84f919273768f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66781 Malicious code in angry-coffee-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f46f54cf29bef66e4c892999577a450e75fd68c79129b01bf84b5ea4e72a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68310 Malicious code in feminist-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e2da2261b0094399538ba597ec863f6159895064cea16c397175c7cec2f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68572 Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68833 Malicious code in inappropriate-silver-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67940 Malicious code in educational-emerald-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...