MAL-2025-68898 Malicious code in initial-yellow-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecbd5eaa570a450f38f5a39399b8722e79d7e63e97095dbfed9adf168eeada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71143 Malicious code in tiny-aquamarine-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732b539d1cd901984b987e445287b3503aed960b724d962713e3fc06ac7d8a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71796 Malicious code in zoophagous-peach-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf463ae7b2abb09e1736b2d0c533e373406ce7e8fe3eafa5b09a7e45ed92934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67974 Malicious code in eldest-blue-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3ac34afb6cd8122c3798387b9662689e060aff66fd75fd69b4e4c0daf940b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67238 Malicious code in closed-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d74817dd2768449f2f66268d58dd06150fa39da1ce0c8ec1efe96659b2ada01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70672 Malicious code in slippery-copper-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcb356e10e64db0af6507be6580a4eed79afc40bb88a73075db9379135f88ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68806 Malicious code in impossible-orange-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae880034a2cb679bef3088915d85f8f10680a68c812e4b367dd6e7346fe30ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70075 Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67484 Malicious code in cooing-pink-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da8d7f82c0b22be34134d5187d346b95757f756bdf2d61d19f860d108ec2610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68894 Malicious code in initial-indigo-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902c8c8f4be2199ec74693de9f9bdc8f79db3770eb30194728df45934ea0bc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67347 Malicious code in comparable-gold-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d295a7d96ef705820b22218bd2f3e00cac0d43d9c89fd24847241ecf54287f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68686 Malicious code in historical-black-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0eb9d4d6c3cb66e340a4096b02600001636c5820972b399531013583122d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71551 Malicious code in western-lime-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8516386775009d1baf8516242f7415014eaf0f388aff10db5f26dc816f9372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71533 Malicious code in weekdayy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df956119036e407b8a96a30e171e0ced3fe42699b074b8117b71a5d9bd97d78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71117 Malicious code in thornypric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971747ff4396df72c7620410bfc1f52e5b8c7bc382d9f284560d4756bb6e8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70115 Malicious code in puzzled-gray-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcf01df41e17086338f54a32182be4cedf919c700c412e4c919fca660d2a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67592 Malicious code in current-plum-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7585d8b0f8c1752b908e53d79538148847fbdd369fc4ea219889d131ac4279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690e1cea006dd78ba30e9b8ae1a8c20674b6ffbbdd3f906a3f772ba1224091f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-wajit47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246b5f8bfc2e08de7ebe2f009d7ac8e93cb7b01f17e2fe50480f00a1e54a5587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...