MAL-2025-67189 Malicious code in chubby-gray-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e9bb5fb61907ef6fbf7a1570c87e18dc26d07c55189767561aaa3507c4ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68426 Malicious code in frequent-silver-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93ef2718c0fa1b09d17ed16d099a078ac84a4d7abc9ee57f5bc193ca59084a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vague-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d14f19397bc5e958d1c64aaea55c34f0db72dc5d1e64749cf6a73219e64543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6151914596df3e7fbc5bbb5b6e9bb4d0dd14880e46382f26ea90ab5e15d023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67126 Malicious code in cautious-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1b206ad012320110f03436837d2dfc620d43d35dd345b2b24cff4c25cda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68872 Malicious code in individual-violet-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2816f0bdeb74107dd05e8dc1bbcdabcad59e94b3bdebefa8441d415e46f0329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70162 Malicious code in radical-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8367fb776ad7c38eb66685ec4896e99ec3c00e8690bdfe87c1331e9505682586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66989 Malicious code in blind-amaranth-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698e76686e61628f27e10e2a84158cdf025190b7bd0fe4fcbdfc37c2cd441dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68708 Malicious code in horizontal-copper-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc611d0158804ffbd74e50241dae09b0029cfe3e362787c5950163ae43176c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68210 Malicious code in fab1anz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c31799e5240746a24d493e24d44f7f09251415ca6079264176855371832384c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68636 Malicious code in handsome-magenta-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bb5c59161bea8f6a4f10e4c1bee35389346d3fe3e3cef95a47a60c0f072cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68688 Malicious code in holy-amber-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0396528c165e73477a65a3d3d8f3ef3643c196b3a25a879e90247bd57a9f3953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66782 Malicious code in angry-teal-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9dfb806485c035c3d54fb2e1d52dd0eeb29a6659325e1678f9f510a44305fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71262 Malicious code in unemployed-gold-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5007da35138647293321e9ceb2a2d6cbb1d16680d119b4e0248d2f4bb21b0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70823 Malicious code in standard-magenta-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ec46b7fa77f3f6990dcd4526b605d858f99b96838acebaf60601fc21c082ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69582 Malicious code in necessary-apricot-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3816f6efa6cfd5a3a9a9047b31e86825b22b3d3439b2cfbe7e5261e6af2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67069 Malicious code in bright-jade-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53959d0e802b6d094593217c5913e16889cecd7229ddacc435086f693600b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66578 Malicious code in absent-olive-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9417c1e88c7256f10a885f52f971aac439f7269bbb4294fbe5a6c62e8876ff97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68338 Malicious code in firm-red-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec8097af94f5ff58f0fee8680de758693057beb96bcb5a6bcea3944c94640ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70665 Malicious code in slim-coral-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbb6450b62db99dd1863a2616d6edb15a2bd5e8e145c503b0e630ea599dfe28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...