MAL-2025-68424 Malicious code in frequent-crimson-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b13b311a5cda812a52e8f87adc5c9ff135479ef223e853c3d1a3190164b4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71281 Malicious code in unfortunate-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2f295d39e2e2caf5747d61b6a9b95c88d1ef7c0d66bd1a173d25f4c314ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular-jade-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f5436e2e1ac7530de2199d8e773808e6e697b4c24350916fa155a99451bb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fcc62ad7a18c6227b16961d6a4115d7edd8637fc633b33529bec5fcd49bf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71043 Malicious code in tart-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb72c3e2404104d11029fdb0d5b89fe92bf18bfbcb3eb0e175f011951616ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling-teal-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612fd801148ed5818c5a011418140b35015894a1a1726ef58fe74f9622a66856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden-black-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a31d7782549b1eefd936044d98c8c39186242defa6fecf574c2f40aababadd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68816 Malicious code in impressive-salmon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a27c052308b9f2a1c420d8633ce9ba85ae2132b1ab5cae14b99206c521249cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68916 Malicious code in institutional-plum-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36cff742935a25e793164b1dc8ff5cfd7238f838b48b82d4b5e174f502a36cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70632 Malicious code in similar-yellow-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f4bf0a87df8bc1c2ea1c9ba4bf8ffa48b0a9908d08a6f4dc5421cdd3cf6e10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67679 Malicious code in defiant-teal-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086230f05c101e1cf641d7e46463258f97ac0f01cc44ec9c7be520cf56cd6eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67859 Malicious code in dragyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f571eb05224447a1e23688acbd310f0f9ffeb41114c8ac14191e2c926ec13555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68000 Malicious code in eligible-bronze-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387c6bbcec344d246523eb5045a18982753d70cfdf226e3968e099dd54f66383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68248 Malicious code in far-cyan-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b21974b029f88f19d57fdca99b2d70d2185ad7d32292d5291b2a1d6ba76a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70895 Malicious code in structural-lime-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35ed53ca2b803218563b1208f6b298f06ffb72467bd82416c7e9eccf380b999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70749 Malicious code in spatial-teal-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cf0d9f94e03bdcc10532d6b754e82e715fcf17adb663b92963884228d89625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69073 Malicious code in lazy-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae4daa038f351673b5b76520af182653ceb094019af2896d7358fd6df1d793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70555 Malicious code in shaggy-gold-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c27fd20786e557024a8e871bad40f601a40e7c6c09ac823efe36308295988d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69580 Malicious code in neat-rose-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd91bda3d1da9dccfda717a63e4fe4f68a0f85518d671810e59c5a0109b65f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69895 Malicious code in plain-jade-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2d183b5dc033b854d7d1583dafdb63ffc047d6cfab200981ff1eb9989f27e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...