MAL-2025-67048 Malicious code in brave-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d467d38ef61cdafcfcc163e771ac9688ba2952a03605e694fe309e09fddccdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70209 Malicious code in raw-maroon-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254e5cfc0d185808744989d6bd880d75e1f8a060635b7bc29df50ec884495e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70557 Malicious code in shaky-aquamarine-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7702dee9be83d87423fee59454f9d89e3800e299f6db8c1d1315677a70c9659e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68194 Malicious code in external-beige-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77f5786f8f7f91cc3588dbca2c7e91fdf7560795b9f23f6492a5b437c167591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71280 Malicious code in unfortunate-emerald-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768e8fddaf8b6ce129e3ef011115e0cb94748f495f2df1d2bce1ce2dc5b99cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69482 Malicious code in moral-brown-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41cfa980c20e3a950c12cc9a16b1d5a54bbb573897d922b307be468ce0aea36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71023 Malicious code in sympathetic-aquamarine-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39b35a915552e0e8e688f43df011a4b9b70e8c263d32412be3c7c17d35b72c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66830 Malicious code in architectural-coffee-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9548be6b7e78cf127c261f8cec416efdf671117f2c52fa1261fc4e63731ff5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67269 Malicious code in cold-salmon-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a821e608160cb4c5b516391a3963900f8884b5b849cba50002d4ae14a481919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71369 Malicious code in used-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13832c023176c909e82d8a1b702913d04e85d74ff41eb984c70147e081c5bfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69343 Malicious code in mechanical-amber-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554de5c99469419ad6d655a803d9a3e57afc2b5be95bd4820dd2247592317d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71451 Malicious code in victorious-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e12dec832fd2f802215448ed9ae329a228a61f59c2cdb06c6d4b82fea56046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70087 Malicious code in provincial-peach-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f52f720a5e879d379a77a5e45df3236ded53d0d70d0c23b0fa1ecc3943931d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71037 Malicious code in tall-white-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ea3e702461cf0b28d41732b2b24b56af2aee8e07ed815f75706eebd4708387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35186290911a21fb6329888b9fb5ac4167729129f68890809327c9c4e6560dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f22c90334e8094fe3c88035665f30f107ba1d90398f7eea24ea47e85b57d466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed2fad885011a5d2be528dc1b0d020c89292f748b74a5895d15d0c7952198b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-ketoprak86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c574dbb7864baef464ea234d842b93e137ed4cd2dee2f74251f82411feb51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gepuk82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f79b12273152e738995d437cfe64f5625454174ad91e2de804bb51eab50da40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9193793e72994639f8f98b3886a12e435672c0fc14edf3e919422ee8c984d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...