MAL-2025-68396 Malicious code in formidable-red-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64aca1c5f4d6f4b9000cc4868120ee799f2ff28512f8e514d98485b3442179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67243 Malicious code in cloudy-maroon-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04f9771977b6349dcd3db5cbbee4fd610db7728c8884f62f58da041b940165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69642 Malicious code in notable-lavender-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8587e820bae58cac07378fd31d0929388c683d313d7fb98efda4a6bb552094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70479 Malicious code in scattered-peach-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b200e1a6b1f519dc3fc5e11b8a8603d69d5acdb796eb85ca368e28e1a9be895c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69679 Malicious code in obnoxious-blush-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4629cb8898338b5ee87ffc8c024e3500d93929b0e8770e0f31606e253881a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69323 Malicious code in mass-purple-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1566fae32358f7ded1d1b5d641600ab28d3184c808f7251450e313f443574684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71691 Malicious code in yabbering-moccasin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc84b8289f00d4532ad4f9f4b0ed863483ca90b4839cb799c6f9d0e16db341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70742 Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71271 Malicious code in uneven-rose-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f28ee7879619b034ebb4cfbd6a10d8a81a66f5fa7e89dcbae3966c2f27d8c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71017 Malicious code in swift-yellow-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2df582faa3dab13c6858218586132474c274e3a5425ff14be5b314c9ea0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70883 Malicious code in striking-blush-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82967994aa1f8eb88ef89ad632693f33aad080c8f57ad34d7caef522866db24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66778 Malicious code in amused-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0faa6b2fc7eefa5085748fa905af2d69a1ea7b5171aa839ffbe6718cd312838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70796 Malicious code in spotless-indigo-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b1017b8efb49df9a8fd6489cb4a37cc8b15873a3b936cd93bc4efbdea7b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68157 Malicious code in exciting-yellow-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9813c2937eda0b5d30d3d46690163d5ce602f9434ab5402d31b3c55b34a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67058 Malicious code in brief-blush-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095d55d4b3344ebf673875304db54a02e15c22ac8ec1997be78a8e5a0bb3a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69002 Malicious code in jealous-green-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63ae02c445bc7cf89c12998264d45dfbc36e4e2405e53f5ac1801e5d8658990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70554 Malicious code in shaggy-fuchsia-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76e9d45f3e1d6bc2e67dc231a3f9f60649f6e7d23e5a59673383596832cbdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68888 Malicious code in informal-teal-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf377d78327a03fed8ac4a8b863ce320652b8659c96b4e43961785478c15e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70692 Malicious code in smiling-copper-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df720ae901fbecd45ee28b0d2f7c44a9e69074904112538288cb5a03628a882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-brown-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdb4bd13f546b1d20d5210cb4d24f34348f24f433288c54f6dd47733fc681fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...