MAL-2025-69306 Malicious code in marked-fuchsia-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db60ba6401dce1dcdcc8ee71a4f540a4beed61d9ac0d40150f944d067d986422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70555 Malicious code in shaggy-gold-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c27fd20786e557024a8e871bad40f601a40e7c6c09ac823efe36308295988d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68506 Malicious code in genetic-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631e2e8ab0e45528fa7a8fcacab0eac1a8d4b787560861ff8e93024076bd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69895 Malicious code in plain-jade-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2d183b5dc033b854d7d1583dafdb63ffc047d6cfab200981ff1eb9989f27e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69701 Malicious code in official-green-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bd057ebec4d6117c8acb3fa003625c4abef79d72912aa1263306073f1a27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71281 Malicious code in unfortunate-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2f295d39e2e2caf5747d61b6a9b95c88d1ef7c0d66bd1a173d25f4c314ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69073 Malicious code in lazy-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae4daa038f351673b5b76520af182653ceb094019af2896d7358fd6df1d793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed-peach-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cd9f9fd444c2f7b1236af3824a6c29d6aa458a08367e2188e94454f5aa55e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-ivory-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8dc6f6e4686daa2d21f377ef1a92018323685cdee5286ecf2093b76480dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67055 Malicious code in breezy-scarlet-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44a5c15699c0f355137f0a97a513d7bf59bbf67edf93e6cae483770031a04aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69229 Malicious code in loyal-chocolate-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c78aafe60d51c46f2d6020db72b2ef107eda61abc83946653ccdb494f9c3d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling-teal-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612fd801148ed5818c5a011418140b35015894a1a1726ef58fe74f9622a66856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fcc62ad7a18c6227b16961d6a4115d7edd8637fc633b33529bec5fcd49bf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cd3636fb3bbfbea120b4b96e14251b65d7f6d8ff91ec0fc0e3215fe4291154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-tomato-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1280df31ebaf45f4a2ebc83b3ecadaba873cecd55cb99ce517b933ee41356092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in armed-brown-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7aab827817b7301529dc65b2932d1698c9aecfbc964d4051f04929174a373c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67679 Malicious code in defiant-teal-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086230f05c101e1cf641d7e46463258f97ac0f01cc44ec9c7be520cf56cd6eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70574 Malicious code in shared-gray-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651fda6b3b6e3ab7abca40dc135408b298dd8ac1943b33f5a069272538df2489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67859 Malicious code in dragyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f571eb05224447a1e23688acbd310f0f9ffeb41114c8ac14191e2c926ec13555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67272 Malicious code in collective-black-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba28f57509daaef6f5f46f42995d30a516865e558b818eaf4b07c4edcbb4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...