MAL-2025-68898 Malicious code in initial-yellow-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecbd5eaa570a450f38f5a39399b8722e79d7e63e97095dbfed9adf168eeada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66975 Malicious code in bitter-amaranth-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685da90c788d49cc51fa687222e101b05dc039c5915454556f1deba7f221632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70075 Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71079 Malicious code in terrible-blue-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c31d2f2f455e81c08b320b16525e825151809500f538ef68befd7c01c477b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-amethyst-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e1d1c33b23e264a94e5e57b411e64e7f36daf1ff1b59f0f11d3f07653116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67974 Malicious code in eldest-blue-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3ac34afb6cd8122c3798387b9662689e060aff66fd75fd69b4e4c0daf940b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70115 Malicious code in puzzled-gray-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcf01df41e17086338f54a32182be4cedf919c700c412e4c919fca660d2a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68686 Malicious code in historical-black-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0eb9d4d6c3cb66e340a4096b02600001636c5820972b399531013583122d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69548 Malicious code in natural-beige-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd29ab80198d2ba1cb3e5f8010f90b6a7fc90d3cbe3203a16d94c28cc5dc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70226 Malicious code in realistic-silver-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3e89ed6c830543fa1162c4502ae7d80624973e8e50e2a9db51e2158b96800d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70894 Malicious code in structural-indigo-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d54d53d80308fe8de99a61bcfe7285eaeeb75f3f637980362f51c51419eb0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66846 Malicious code in artificial-purple-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c1cd4c41c1c76f4fcb622f78fbf388d7666158e08d528af5085acdde7953a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66669 Malicious code in advanced-crimson-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5e8773e8927cb2122f5b17a00d0547c6f0a2ef882b0349e46f85fc89c18f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67347 Malicious code in comparable-gold-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d295a7d96ef705820b22218bd2f3e00cac0d43d9c89fd24847241ecf54287f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70012 Malicious code in printed-beige-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17023d19174226235698afc1748019f9ff972ec12a5ddc25893dcd6a04dfebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68894 Malicious code in initial-indigo-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902c8c8f4be2199ec74693de9f9bdc8f79db3770eb30194728df45934ea0bc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71551 Malicious code in western-lime-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8516386775009d1baf8516242f7415014eaf0f388aff10db5f26dc816f9372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-semur68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3910aff4aeab159f4e9132e521e0a5d6b9c9c39c7c8bf6694534f49b077bba54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773eafda0abf8436cf4846bdf9b859c50a0e024b0c3eaeaacd38b08ea833ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...