MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70335 Malicious code in required-azure-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5770ca3e2f6346ea16e82c0218a69932c3fe4d26a7e8597e9f29af33d373e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66575 Malicious code in above-coral-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f958d802d0caf0247d0d428a9e894339711c5af5a790a45d9e9d7a082b14bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70468 Malicious code in satisfied-rose-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d644e3d58ce9e42c5779266e2bfd7d4a037c943fd841ef2e8c85678c61543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68365 Malicious code in fluffy-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddad31e43e3421d51fe647897902d78cdebb744104f2cc4f9b48628c9b52a006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68041 Malicious code in energetic-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f416827b5d729f75586bd613e9b43f8a7ff1bf5bca348465ea951cb60913f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68741 Malicious code in hurt-aquamarine-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d639ab780f7d703fa2d1acae8ca34701ced21d79f8997e8f70239b771c3863c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69330 Malicious code in mathematical-tomato-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f979a30b627cdaffb8d1c1f5f4e11cf44fd1b8c09ca11ed587079b047a9be2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67099 Malicious code in busy-bronze-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319d48c23d38d49cb229c8b2b17016be121d4c0add9ce422e41fa9d13226b7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69358 Malicious code in melodic-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ee3638c036a24c862b57966826c429c8628bab3db74c27ea8dfea4e094b2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67555 Malicious code in crooked-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc13f36b4814694e66b21e2c5081a97fd69395c9fa373ea750bb96432c2968d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67851 Malicious code in double-sapphire-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c79e97c70da78e4693d25ab309a27639b45dba0167fc6a60f56695e0309373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67690 Malicious code in deliberate-beige-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c95c0745b9998315e41f8ce760662d6d588fa027611f87d710989d25d970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68740 Malicious code in hungry-teal-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b97e8a3127ce33d1d37a1c5f670c99bf2eb271f4010db8596ac2c46d23888df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66960 Malicious code in big-amber-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6d0edf6126a0426cbdd9428c728cbee561fcc5f789245646a332dcb81c0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71082 Malicious code in terrible-scarlet-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf022aa89df38edd5da11dde4d7537a96d77f211ab7223241223ea811fe19b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-green-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c628f0dd3c06d481f70ad0d075c7b928910b99016719bc7109752d6b5952e539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative-lime-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5643e58b43ca056a6189f51464efb62ac2b95f214f082151dc86976dd121d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integral-peach-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b121b88564d8967e6d4a41279c3099ebb39a4a1192031666370d3e006fdee03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...