MAL-2025-67974 Malicious code in eldest-blue-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3ac34afb6cd8122c3798387b9662689e060aff66fd75fd69b4e4c0daf940b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67484 Malicious code in cooing-pink-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da8d7f82c0b22be34134d5187d346b95757f756bdf2d61d19f860d108ec2610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70672 Malicious code in slippery-copper-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcb356e10e64db0af6507be6580a4eed79afc40bb88a73075db9379135f88ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70075 Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69190 Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69527 Malicious code in narrow-blue-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1271707ba1fff1cdf4b58258e4f4f122ec45b2468f44ddffd7e95a2cd4b45d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70221 Malicious code in realistic-lime-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ef87d9ab3037ec5306e98aa562b06066f5d958ab41dec3b57a9b9f2cdc09ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69197 Malicious code in living-olive-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f16f972f5e9e41c5720bb9a58345a1c01c60b893724218e009208547750173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69440 Malicious code in misty-sapphire-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684df63822d4f0415e2189bb1898899590db165fc99f4ffd8574f57e8774d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66882 Malicious code in automatic-scarlet-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e846f52ea0f66ec5d6ba06e6207b2100f0f07b7ac28281ba3d6f1468a6842f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67258 Malicious code in coherent-chocolate-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8252d5d1c8d869354d4c2f759483dfe611a63eca1ce6ac61a84f919273768f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67175 Malicious code in chosen-indigo-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd0a3ac28e00cc5fd787cf4c358d04675cf3c86acfd4add96ad0c2cdf56d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67347 Malicious code in comparable-gold-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d295a7d96ef705820b22218bd2f3e00cac0d43d9c89fd24847241ecf54287f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68686 Malicious code in historical-black-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0eb9d4d6c3cb66e340a4096b02600001636c5820972b399531013583122d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational-emerald-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp-violet-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbaf4743626d7ee7fe6d55f6e4288e45dbea9acd659dfd5fd897ef2fbeff7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68762 Malicious code in icy-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ed23d60a636f5d1d228f2e1c5e8432066e3f629a30d9c9a255b40251301a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70012 Malicious code in printed-beige-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17023d19174226235698afc1748019f9ff972ec12a5ddc25893dcd6a04dfebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...