MAL-2025-69548 Malicious code in natural-beige-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd29ab80198d2ba1cb3e5f8010f90b6a7fc90d3cbe3203a16d94c28cc5dc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69527 Malicious code in narrow-blue-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1271707ba1fff1cdf4b58258e4f4f122ec45b2468f44ddffd7e95a2cd4b45d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69190 Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67291 Malicious code in colossal-green-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987f041ff8a13fbc7a71c9fa79ea531ba748b9de99e30b1bfa9176384d8f3d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68572 Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68780 Malicious code in illegal-copper-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4ac9d69a6c861dfd05bd04ecb853c7717052eded60faeef4301bdd2fa226c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71143 Malicious code in tiny-aquamarine-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732b539d1cd901984b987e445287b3503aed960b724d962713e3fc06ac7d8a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67939 Malicious code in educational-azure-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd023a0a5eeebe26572304c1559e85e68c60bf58946bb10ac37992aac785c092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66882 Malicious code in automatic-scarlet-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e846f52ea0f66ec5d6ba06e6207b2100f0f07b7ac28281ba3d6f1468a6842f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68684 Malicious code in historic-purple-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd4f6743c8f2eeb19d293a0518149d120c3145785ed8b89d8463d6f4766c508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69144 Malicious code in light-coffee-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a8e6c936fcaeb396e096a81d0ccfb8256f5b5328e3dc71baba7b8a729e646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66975 Malicious code in bitter-amaranth-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685da90c788d49cc51fa687222e101b05dc039c5915454556f1deba7f221632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70885 Malicious code in striking-olive-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e15e037244c6fcc8e27bf18299e13d7eaa9c83c2c02686b9ed750fcfd16379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67307 Malicious code in colourful-tan-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e4be263ccc7e751a75f8e07d7c843c41313eea9aa19d1fcf90ee3e274a9ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dragyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f571eb05224447a1e23688acbd310f0f9ffeb41114c8ac14191e2c926ec13555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational-emerald-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b355ae7ae779a30f94da93c4e2d464a31d9db57ab02bb2fda019f0d614e6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-bakwan39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb2aaaf54e70933ec27dc1f1f3ff88bd7a7c78bc0abe17181fbde2101cbca79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...