MAL-2025-68615 Malicious code in grubby-silver-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c879a7a202c0a87e81bd1d98d4a0a2d4be98151004e4efaecee924caf5a94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy-salmon-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ea89e186c278eb2423d71cd64863133184cd2332efbbe51300e3289089ab48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-amaranth-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1294a944e54ed5aa67c36b18af359324b140f69b8f411f1fea3d3aae1f03f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69657 Malicious code in numerous-salmon-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ebc2051a089470d941675cc098f600f2154f5df6fb9f62e94e006df0791268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70939 Malicious code in sudden-violet-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d732500f28025ebe20921c0f11b93514de44a88b227ac9c9e1efbbe891e6dcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66905 Malicious code in aware-green-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ecaa8e5d489da8fc6300724abceb1a13ab27e726efeec892bcca01bc50f371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68875 Malicious code in industrial-ivory-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f4091b09dd34c2f660257e6736992d2586737212b3178e8e0419ab6aa3be66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual-blush-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b69a002cc147342a2bc58de02f2cdebeb89b7517c6f5fd1cf07593e18a4aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f933137ab6d7196f261659bdfd0cf3c4641d58e8d9faec7f895d77db332c74af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic-ivory-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410a155785bb0c8fe3d5b52615db7ac4aa03c24cb097a41a5a0697046c99e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic-lime-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55265498f9cd5c1198bb5eb954fb63ed37c9195ddca2b656aeb45d6f55817097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-emerald-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee452ac1283fcc3857be723197277f26a4c668ed4084910c0a1b646b9a8d61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66961 Malicious code in big-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f7aeae634b33ab25b843441d2741ccc1d88d6494229b03795e213c8c7428b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70439 Malicious code in ruling-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46dcc80ef31cf47c1f96d0ed43757aa11369292da1f79f93e658eae25a82cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68376 Malicious code in flying-purple-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67dbfd4632c6585f40553d87f1ebc341531505b5ca0f3bfc6edc07c3d99e8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69203 Malicious code in logical-salmon-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaeb249b01cb478f61481085479b8c66e3267133769da4f068a7945b2aec58f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69241 Malicious code in lutfhiichwan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15abafc47b11e84479382fbc160b2f7ceecc705d2aede60b6a0a43f0dd39a09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68680 Malicious code in hissing-lavender-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79df1cfea5562b4a57edb15585fbb029b5f3aa89ca096e75f9f493757dadfc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66727 Malicious code in alive-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e7d433927058e89b625011173b651f49b00420c6ab3784c5548eac5ba84b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...