MAL-2025-66746 Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71309 Malicious code in united-plum-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea82fdc7ef193e7155758160395eac8f6aa8bb71637d861681cddac5d4f8a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68833 Malicious code in inappropriate-silver-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71045 Malicious code in tasteless-coffee-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c528b17efefce5e949e95d4f64236255a17876de0144cc4f7f337e81d4141f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67347 Malicious code in comparable-gold-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d295a7d96ef705820b22218bd2f3e00cac0d43d9c89fd24847241ecf54287f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-apricot-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1988c41faf998866faa5bea614364e09fac1bc1ea4196e6abfb676700cdcdd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-scarlet-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbcb4e4b148e1fcad03e97ff8122ebd2c294a0d89e7c01cd1707ba0c3eed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-blue-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce3a6b781794cd41a53760395112e1010a0cea5be63f15b2bcdb0e9ea03e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66669 Malicious code in advanced-crimson-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5e8773e8927cb2122f5b17a00d0547c6f0a2ef882b0349e46f85fc89c18f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68001 Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67939 Malicious code in educational-azure-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd023a0a5eeebe26572304c1559e85e68c60bf58946bb10ac37992aac785c092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68572 Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66969 Malicious code in biological-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e3c5d54095c7f4b9f24445b33f2cc6e69e4f97c9e17c68b92a0da548fe01e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68384 Malicious code in foolish-fuchsia-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab91fd12ec137ccd80e1dee3869954781c6826cf5c774b448941f750944763a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66975 Malicious code in bitter-amaranth-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685da90c788d49cc51fa687222e101b05dc039c5915454556f1deba7f221632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68403 Malicious code in forward-coral-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163e4c6e52845a94770049fbce8c5cd88195435dfc76afdfc3b66decb1a516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69028 Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67175 Malicious code in chosen-indigo-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd0a3ac28e00cc5fd787cf4c358d04675cf3c86acfd4add96ad0c2cdf56d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...