MAL-2025-68626 Malicious code in handicapped-apricot-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db44263c50a582bd54af265f0bdaee2aea2de081a7119e74afff4ca5d667a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69870 Malicious code in persistent-beige-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a801573b48932b8e64c285db902a0b5407607008fec4583c661922b0e33661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68241 Malicious code in fancy-beige-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d49d50cc1f6ed3eb792e1d46af6ae800cac80c3e9e1a2e7ffb6c43b79fd270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68455 Malicious code in functional-fuchsia-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cfb1a2c0ba9dd90e0f80f4e706aa77d4c328ed49db749bb6d8df4f63b81946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70370 Malicious code in retail-magenta-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fa05c467f2494cdef9107f31830567d3299b73cc7ee3f21b2fb98bb1979bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69364 Malicious code in mental-turquoise-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bea37d9ebdabcb541c0dbd5823ab75a5d1b6ca4d5a398facce1348448c7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68818 Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71558 Malicious code in wet-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257acdbc69da100c14073df4ea73f72e7fb7e3e6f815b1974e3439680a52b43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended-tomato-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8c07b0523004b8641ef70ddd846e2f9c69a058b95d4a24ab8fb38d0ca630dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent-crimson-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf7e5f70a3a1dd33a7603be8cb83182735765f7f1179b98bcd402753702493a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70431 Malicious code in rubber-plum-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f2cb293c3e9b155198b19825e766b2baaa70fa6c95e79c1ce1450bfb95c17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71431 Malicious code in vertical-tan-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891ce3f3cdc86cbc11874359df91f55be147e36783a5e63106eb26827ff876e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious-black-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6775f2f96fd0cdb9c76488da3896123cf7466e8d7399577ba71cd9b23b624b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71165 Malicious code in tough-brown-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65eadd0dc03c7cfb53d379280bfc37690748319b29fadb5f944aac41fc8dc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71136 Malicious code in tight-copper-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c4b63883ccb709694df00325e9d5182362c77e2eca8efbc0dd2ddc84e32ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69553 Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70710 Malicious code in sole-apricot-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e43c86c1c4c0c72df8778635468c857f119e12fa5bab6f5aae6151f1d04e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...