MAL-2025-69867 Malicious code in perfect-turquoise-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54af203856ccfef821830dfff5d983f48dfba299f62d5c9b06a980ca3c1f20f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70577 Malicious code in sharp-amethyst-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bc1c1485aa1b6284c291fa195ee6b09c29aa0024582ea46f3a162ed8587665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67209 Malicious code in classical-aquamarine-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64482e0adb352d7d09cf79aba8eeb20c513d1bfa891655b4e188668a5fc0aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66895 Malicious code in awake-moccasin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73da3a70a32b207227254b2689fb531bbb8ecb0df8b07400310519597b0224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68986 Malicious code in isolated-bronze-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6235956f79263662ff129bf606e13aa3be29e48587b62990b39121fd5ecceba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71091 Malicious code in then-red-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f1a5fe98331be193a2517d96daa404c77c3a5e172d79174ccf68e8e0bd52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68077 Malicious code in essential-copper-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6553e3185c461d94f9d1823461fa82e2d8b2362e7d8930a215129499550d7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71062 Malicious code in technological-gold-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145a79b328c66987ae84ddc2804d7e49501a8a21ecf91b8a29dcd64c86f55f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69602 Malicious code in net-amaranth-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71288 Malicious code in unhappy-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978841f80fc19dd53b344847c548bb20c5b0487ac1df105de83e173fe8941438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68798 Malicious code in imperial-orange-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743f3ca96257188850168c051bf1db1488201b22c5c9547e942c34aa6520111e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70714 Malicious code in sole-salmon-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318cb5aafdae4290b93e47e904fe9d6f26e74c08382a17fa6dcb3bb8ba182266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable-amethyst-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa32d0ceee5cfc2f37ea2039e1b7951de93a72e91abf374b496d2e7635fff328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68132 Malicious code in excalibarx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5432f48f86ed6741ee63abe7aec152cc2be52fb010f7339e0e8bd5ef3021f711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df27d46ca3177cccbe591878f31fe3c364af698a20a8dc42dfb933dfd30405f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing-aqua-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d938324acedd4726c66308424ba3ad390f1c4cf8213effaeebeb9722e76b284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-lavender-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad4c00b2f73e39731bfc44232196d4517bceb4cf03bcf9d70417bef651fc1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-pink-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30122635d2626829b465fca4f4a2d90347ca9dcb07fe7f781794a617e09bc084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shollypeez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3ce566bd795207c0bc1cb9d587dcab74e6cafc41b530a2c6d9c8a7005ceb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-salmon-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f852fe0c7b047e54f22549ea6098cd0598526485f61f59b6416a04c079f9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...