MAL-2025-71166 Malicious code in tough-cyan-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96591d5ea196671a5b92f710d0fd01144792e47d363fcc637e130b735c0c2182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71290 Malicious code in uniform-amber-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7344771a2affd254f34742a2540a961b85c828d8fcf31682b76987917e408688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68711 Malicious code in horizontal-tomato-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73369bf60dd7256664f099758550acca0a6313f2130ec36fcf7ea078642af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70897 Malicious code in stuck-copper-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb917896e7479626d48f4cc7f5e22c8d5e60b113ec99cb8004a3faf1585cf4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66865 Malicious code in associated-purple-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e319095e195b55789255547211e41fcb16217356b00829ea66b83c3cf92894c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69094 Malicious code in legal-moccasin-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b573c5ec17a77154a30238128d3d26f169e2c35a9e8f6397f74131983bb478c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67292 Malicious code in colossal-indigo-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8052b473721331e357824eeb7c41e0259df26525aa5d99997f597acb2f0221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67250 Malicious code in clumsy-maroon-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a74b16c48751dd91ee315fc8ba82366284a4a454ff04e12837ce63102b2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67958 Malicious code in elaborate-aqua-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b467294fd71b6e7941989dc56c76ffdac339ad2dd1102004fe8a4927c3702260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67680 Malicious code in defiant-yellow-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0626a13f5064a37102806d73cacc0211ef06e2d67ba8307c6908287b24add99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68370 Malicious code in flying-amaranth-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73b2d80540bc5205d211cf4017dd5090358cb30a92ceb4e2c2e269e2df11cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68436 Malicious code in friendly-brown-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09012ed3a0d324221857fddcb7a5845c4c97492b31b8395678d50b4c50a76822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69259 Malicious code in main-crimson-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72018a459fe6b03c5d0b9833b3db33b3cfee6c229c3f8b416243ead018830e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional-black-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea70bdf04196031dafd305b7540272f21609a4a37a01f43f069874a87f7b982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-violet-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd2e0cec3761605ecb08a23b6adc458b99a58468dd245abf1aa9f7720dfa597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial-red-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8cc5ae80c7bbd1c226867c96be67aa5906952ada4802a6ac6358a4399a4dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious-beige-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3147f255ade3d4f2310ed807661e33b84f6b7769b6be41647e1f7edb19e5a294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed-salmon-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492e1261a398828bcdfbe71f1c4d320a266eb72b8de45c40932b043c50700d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in y0ngy0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541661e3ed7f4d2418b8e59b979bff4bb520968b8ee0111985874aba792cac0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...