MAL-2025-68833 Malicious code in inappropriate-silver-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71160 Malicious code in total-beige-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937791320b2991789e840c2bf698d51500ab692f83b03be91f1513d4a7c63c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71284 Malicious code in unfortunate-teal-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a4101863f88c1d410705fba8c309ae55a2c7a6adb280f56caeb101c072072d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67940 Malicious code in educational-emerald-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68572 Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69028 Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70321 Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible-orange-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae880034a2cb679bef3088915d85f8f10680a68c812e4b367dd6e7346fe30ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69839 Malicious code in passive-white-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28d405b44fc0024fda7b317301a2ab8c701e1c511a8fffe13394e0f039a35cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-apricot-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412629b0158b1602c1c84a6007d27f9e4502a403f63a9894093675d65a6357f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67896 Malicious code in dull-amber-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789d459d1cc7730f5ae775fcbc9dc8c66db105fd90f8343c4f1f7829c6e4488c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67303 Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68762 Malicious code in icy-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ed23d60a636f5d1d228f2e1c5e8432066e3f629a30d9c9a255b40251301a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69658 Malicious code in nursing-azure-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1249bcb713d69512c7709732a469750bdb860ca642a63e72064aa6dd909e467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70674 Malicious code in slippery-tan-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cf977953edebe764a9dbf7b172bb7f0714b2342b1ef513f04926f7f4f872d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67981 Malicious code in electric-harlequin-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e979048cebc77ac919b9aabb55dfab63613acd6cb7c465c2be480d4d9438e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67316 Malicious code in comfortable-lime-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3629ff063335e12551b1ff7b2ea16aa6a21934bc59274cfb5425f7c969100d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68310 Malicious code in feminist-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e2da2261b0094399538ba597ec863f6159895064cea16c397175c7cec2f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68635 Malicious code in handsome-lime-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323bce7e95771abd60e13cea52b545c7b18228480d10622d52cfa32defcc141a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...