MAL-2025-67189 Malicious code in chubby-gray-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e9bb5fb61907ef6fbf7a1570c87e18dc26d07c55189767561aaa3507c4ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71711 Malicious code in yearning-chocolate-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad5e7674544192493434021f9bf63733a637b744f6f4903f5b5a083f51e5381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69573 Malicious code in near-orange-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90a35109ed738f41da92608770c3c65c5b7599867c3634eadc60eab391c14f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71262 Malicious code in unemployed-gold-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5007da35138647293321e9ceb2a2d6cbb1d16680d119b4e0248d2f4bb21b0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70301 Malicious code in religious-blue-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97d6af21988e019151eccdd0dcd3fc90c643671a1c9978d228e5bd48d23f3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70483 Malicious code in scientific-moccasin-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872076a757d7c8923ae91ea4f4949f9da46f9bba5301cefebef292b10d60adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67186 Malicious code in chsiantur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a87760f6c9e18bf4012259382f27f27d5fe26b91e1109ec22792c5cf42bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69665 Malicious code in nutritious-teal-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4381f62e535937ab5b6e80dcbe55cae92d385e5fedaa811535a5c72cf90ad959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67908 Malicious code in dying-green-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd9470cebfb2d5f0e26cb6daf3851429b3cc82ab8d6c853b6c479403aecb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71155 Malicious code in tory-gray-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377fbd27d08702c79b0d1a1cdc40f97e99b2119553e5c69039ea258acb3e568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67046 Malicious code in brave-coral-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f406273f28a62a85ee8d1b40aab451eb79f45b2631d03484a4db231a95a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw-maroon-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254e5cfc0d185808744989d6bd880d75e1f8a060635b7bc29df50ec884495e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic-silver-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c3145cd9591902dee3b98fa1287ade3818c70d9c9eae9576c4a500ba9d569c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67625 Malicious code in dark-white-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c30acaccf558a368a74d8bdc56a6db049738d14ac573d6ece785be774e0936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71619 Malicious code in wonderful-sapphire-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c9f3b858a06ae20f77ea6a549e2eb15f882c96b1d4db684f2390c3efbaf05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67224 Malicious code in clever-crimson-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742ee34854482456da363c21f5eb1d189966fe0757c64e1bbfd29aa7dd7ec8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous-crimson-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928385e6bc206c1210f77eee5d94b35c9fb4a4033210b0acf5f4c68bb0e18e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69583 Malicious code in necessary-aquamarine-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf5b29defddf5bdf1041f26b17ecd0e5f5308ab9d0abcfefc00f001fe8fbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71326 Malicious code in unlikely-plum-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dde274ec103e829d99e4dfa960631a143380c80c9292594eb8c4ff7f19b862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68807 Malicious code in impressed-blue-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3aba3302bc2eb936cb3c7ed64313b887259911d9510136bbaaf2eafb8d04c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...