MAL-2025-68438 Malicious code in frightened-harlequin-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdfeacf8eca8c835c714d0fac58a5b6db9ecd9d7a85aa0e2779eb2aef05a2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66906 Malicious code in awful-cyan-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707fe3640d276f0bfd5eb224016268d74c346adaf5807c8b085fb1431e0b6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71060 Malicious code in technical-tomato-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2728d7d6fd73cada4be0e42aa3623f21d9f8b39cd25fee3a39719cf29bd61a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67793 Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66953 Malicious code in better-purple-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f05fd2a80e7c60ebe230c9cee5cff9cda413096fa0530180354ef768676e96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68068 Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71496 Malicious code in voiceless-aquamarine-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8146a25f15975f91067ead3eaa7be6fd2b1cb7a5b9a168db26e17e6e395a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69735 Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66777 Malicious code in amused-lavender-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7469fcbd18d2dd2bac18d69440984b70697bb2e9eb3068e3ab99f65b6e0e33c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70114 Malicious code in puzzled-chocolate-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ddcb9303f775978e20d9c4c9d166aea34a201e7c397d54045edef64b0d2bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70346 Malicious code in resident-turquoise-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe891155642e09a144573d907d878f0966acbc4cc6e48c92cb8f9b9f3227a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67789 Malicious code in distant-harlequin-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5f3b65d9d6a6aefcd43092572d27b4f6adcd7c6acc611301b6273a0b4bb898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69341 Malicious code in meaningful-scarlet-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d58150bac0eef99eae5c555fa4aa40f71b7b928f41d90eb12f1b3d3a9f13fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71467 Malicious code in visiting-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3ac39b09725eed37963b2278f501e3a9fac0287caf253277b36d66f8134fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68201 Malicious code in extreme-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890c91627cc6c652cf395c5a897dc51dc34d7d32aad8e9850826e492bb373793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male-tomato-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd5c4f438a14f782e9e5308c56c35c3cb4e4c3b30fc85d1de80ccf9e28be0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked-turquoise-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e8faa84c5534110cdcc93ce98e3bc35ff50e86983ce39391d8f6bff29c3e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow-indigo-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc74d55e9ccd54083d19b6078ceeded471473dabf15d48cf97e2cdb309d7afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70283 Malicious code in relevant-moccasin-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec3d41649b5e9b7e4dbed45b8351863b20a94e2a758d0e2d695607bea59eda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...