MAL-2025-67981 Malicious code in electric-harlequin-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e979048cebc77ac919b9aabb55dfab63613acd6cb7c465c2be480d4d9438e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68635 Malicious code in handsome-lime-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323bce7e95771abd60e13cea52b545c7b18228480d10622d52cfa32defcc141a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-apricot-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412629b0158b1602c1c84a6007d27f9e4502a403f63a9894093675d65a6357f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69491 Malicious code in muddy-magenta-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d62ae228ae4a7575e52392f52d4f8deda5a01312a5615c51558c0aced28ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67413 Malicious code in confidential-olive-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281542f8009b505d9d5b7fd5f3a0819908f11d3d2696f0b649ce0035df09849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71183 Malicious code in tremendous-jade-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63a2385372e4ecdbab4226588e0dbbc4646ccf651dc125b6147957e847619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-scarlet-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4080214e6e792c1ffe5c60019c1f3a37f17e56897a051132d6a40b0cb4ce8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow-plum-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45685ac519da98bd076dfbbafd6a4955b4d8be1ffff492c840df1e8259e40cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-black-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015d243eedfcf4e56a928170b32e5515d0a1ddb7225c4578826501129ca59578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred-turquoise-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f99e8481fcbec84d2db566bf22d6a03861a58572abb656fd8328cd1906265b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable-pink-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9f3eff7cfdf25fce455185d5b3ce95318dd41e8d299f0108847a1d97abf1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven-fuchsia-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a1c909b517cb679543bff313daa26ab347277a7b42a2b5bda61c65ca0176be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71676 Malicious code in xenogeneic-green-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d2fec2603c7a7607418a492541a157dda2061bd6a33fbc3a5a045bbcb5f686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67316 Malicious code in comfortable-lime-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3629ff063335e12551b1ff7b2ea16aa6a21934bc59274cfb5425f7c969100d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67303 Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71463 Malicious code in visible-white-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0259b68b8b704b7ccf8ef65ebabf6b7db78840fa9fd3e72ce04b66d9388b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66609 Malicious code in accepted-gold-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444d310bbf9fa53537a72ee80d09ae2feb5cc7583b0becd2015981c293c5b145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68026 Malicious code in enchanting-turquoise-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234689944a502e4eb3cf26411ab53ac99f308dec1f3514248a40c224dddd3164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68833 Malicious code in inappropriate-silver-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71284 Malicious code in unfortunate-teal-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a4101863f88c1d410705fba8c309ae55a2c7a6adb280f56caeb101c072072d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...