MAL-2025-68641 Malicious code in hard-turquoise-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a89cba7a6c8ee6a1100746303a1689f144704c9d14d54cc3851aacfb38f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68911 Malicious code in inquisitive-harlequin-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7877230c18f5c2a5f2d160cb45b37c1c75227d05e9590c9fce88dbae4d925bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70701 Malicious code in social-red-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc441864099719c1b972e7e1c5054dd2a02c9dcd24fd1541d91741cf907efc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70025 Malicious code in probable-copper-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b700976060990e68c2cbca094845cf0e03d2290ff87c08c2a0522fe74b7cf6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67541 Malicious code in criminal-green-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510938070d9a14f3458d5c6caa6e4acac517749dd78d028281014e3977ade2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67206 Malicious code in civilian-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0902ce3981d4280a57000cf5222fbf3cb73197d87c3221baed691af0ccc3cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67663 Malicious code in defeated-ivory-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc535268cdcebd2aaf9c796aa0fed3710a6068fceba41d0965bd66cc52998250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67612 Malicious code in dakruz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca211a3287b5cd835f3a7357bdc91092dc80d87a90bb22f7b6eb6feeb08d96b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69576 Malicious code in nearby-amber-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24920925b62870689934f00932754a929f1c04386f728ac392843318bd6eb8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69240 Malicious code in luminouslab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a21639f54fbf9b268adc658b4e4bfbe37000c2b681ca514010c1dff890da92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66640 Malicious code in additional-coral-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e96f97a6e6e8f8887ac9e3a4d81e6862cfb105d5471195e540fdc5904a18bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69100 Malicious code in legislative-gray-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6598dd43d9b88d66a81eba709146242a14e2155b6d2fcbca0cdf772b0e25b3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70433 Malicious code in rubber-tan-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08274620856864348e23d6716e3501a13040b0899523166b3dfe537f60e7dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71559 Malicious code in wet-coral-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b764fde6b25240a1326ee900300f1e5fc5debe982d31f9e967d37c8ce10da3c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68291 Malicious code in federal-emerald-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989c426157388d414bcb8531979c6f2189a027119c6c3179c58e297c1cdc2168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70768 Malicious code in spiritual-amaranth-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e5802b0a1e37797308419ad2478fb01764e9e9dc4883cbec3aa83b7df7af96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71408 Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68059 Malicious code in envious-tomato-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020d7d775f5a616c9004b03d2b538e77c7c20b191d02105b3c28af959c6102e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69387 Malicious code in mighty-green-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8428e0eb5ec3f0b1e0ce7fb51d1f022d2dd096584b82bb022a25555d5d60cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mangut13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e4b71a890de2a11f2a6fd9effae5945b37ab415beb19e79d19d5ff29adea6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...