MAL-2025-67958 Malicious code in elaborate-aqua-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b467294fd71b6e7941989dc56c76ffdac339ad2dd1102004fe8a4927c3702260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67680 Malicious code in defiant-yellow-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0626a13f5064a37102806d73cacc0211ef06e2d67ba8307c6908287b24add99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71290 Malicious code in uniform-amber-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7344771a2affd254f34742a2540a961b85c828d8fcf31682b76987917e408688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70227 Malicious code in rear-ivory-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f285011e86556c3ca37f2177de387dcaeb79af0a9ea262b7048c1778c35745f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68108 Malicious code in everyday-amethyst-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca70174db2a4256de313328bf7e7ab7be8ed32fd9e89c9e2756112331c5842c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68370 Malicious code in flying-amaranth-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73b2d80540bc5205d211cf4017dd5090358cb30a92ceb4e2c2e269e2df11cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71222 Malicious code in unable-silver-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff46723e5051d67aa359bb74848302dba9ced28e1265d10c2a79987afeda3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66865 Malicious code in associated-purple-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e319095e195b55789255547211e41fcb16217356b00829ea66b83c3cf92894c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70901 Malicious code in subjective-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba082f3db73056c1df3726e1625caf2e364664a36bfc2037e15bd81f29dbc6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68104 Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68397 Malicious code in formidable-white-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e4f8400943f94f7178fbd29255bf2715718676ef1d57df59da9eb81441e293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67292 Malicious code in colossal-indigo-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8052b473721331e357824eeb7c41e0259df26525aa5d99997f597acb2f0221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68711 Malicious code in horizontal-tomato-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73369bf60dd7256664f099758550acca0a6313f2130ec36fcf7ea078642af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious-beige-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3147f255ade3d4f2310ed807661e33b84f6b7769b6be41647e1f7edb19e5a294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in y0ngy0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541661e3ed7f4d2418b8e59b979bff4bb520968b8ee0111985874aba792cac0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary-crimson-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8884cc126ea27384534c6efb37f9e3976dec10dfa0d88a16d128787be8f5ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum-salmon-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae965dfd1bc6597f1ca35a71cc1ac7257d4797869faef80ef1eb219284c8cecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liberal-apricot-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddba2e27f104eeee2d621a20247beddf762809fda8d247e37a45d8a7a77debf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional-black-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea70bdf04196031dafd305b7540272f21609a4a37a01f43f069874a87f7b982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...