MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71531 Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69295 Malicious code in many-beige-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e5004340f1c5b3664b6340ddc594821516f76a2a22e1855bb11e7d7cfb470d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69957 Malicious code in practical-tomato-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2633e7a9d278562971e96f470d33db2791b9ce1f4af3e99d64ec960c8aeab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68975 Malicious code in intimate-magenta-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae17079b44effc32e36432a0db0d0c98d21ae6aa32985e55d5dc62d22a807b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67756 Malicious code in digital-moccasin-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6ad3e2215164b2dd272f366ad08508a1407c7a87baa6c9f84dcb3c7d5cbc04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68897 Malicious code in initial-tomato-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9371a6a94c80da6104b4cbc63e4c3c7c8285bbfade217a535b1918a5b6ab36cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71081 Malicious code in terrible-maroon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697a9dacf55ba165e543ce6cd1a701e998c30a7c159f329cd8d94b16ff0befbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67499 Malicious code in corporate-scarlet-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7a529d122ca29028d6d1a09d3dfab7446b9d8364c524b3f027aed8d977beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68604 Malicious code in growing-fuchsia-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377551a11b126fd94603b6ba134b3eb8673a0c9eff870a3e1cc0a4cc30d3b75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71499 Malicious code in voiceless-harlequin-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fed1aedb40ea089798914f35797e6e1eacf3b75354b85415c70f2deeb7e5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naut11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809d2d5f9fca56b60d196e6b1e05df17f7786a48f4e09465da77ad3444271a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flaky-turquoise-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300412a4a365cf086854f146429eff5a882b5adad392a53b18ccdf88834618ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theorhy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15d11789092dac8ac08e646da260e8fef749f90da1e550d356cc8709d0d6766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68632 Malicious code in handicapped-red-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9bdbed9409406e836292d37c0de6c2c308677834a5c87ed0f5fde6328c552f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71340 Malicious code in unusual-coral-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acade8225a1059f0339a9b5e33795261cb49cdc30f454f3d783fe782bde1f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66806 Malicious code in apparent-brown-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92dbd6087014491104112cf573b4194681ad6f5012eae47f1d3179a460191ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69770 Malicious code in outer-crimson-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0493c2980b1906dcd7b2133c3374ce6ce0a34139ea60f2cf288aaafe02a4e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68091 Malicious code in ethical-cyan-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942e43edf6c19fa621c8dab170c464920cf42f634be0d22a1339327174535f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71352 Malicious code in upset-brown-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62a2382b1b0d1d4f63b419b3965dc1227c8807ad95d938b02750f3f19bd4c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...