MAL-2025-69469 Malicious code in molecular-jade-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f5436e2e1ac7530de2199d8e773808e6e697b4c24350916fa155a99451bb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67677 Malicious code in defiant-lavender-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d61ab6e2e6315ea624ace1a8228ae93e4e1a6da1bdfb6004ec0f547d8361231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68672 Malicious code in hilarious-fuchsia-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51eb5a4fea134fbf5fdd74c2192c26cf56e7aba0aabcae7e9b9b2b1b18f5ce4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66785 Malicious code in annoyed-green-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf01f40ea9a7fdcf3e7a749d8fff668ef9921171a8c44063fa82db84653bd6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70851 Malicious code in still-turquoise-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ba7299ad60faabc5b54333d1a9fdaf5f0d7fc7f12dd3d5f8eefbb47d02e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable-gold-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82371942ad3ef0ebde2ce108d883a379f4e213c7491db54b20623e3d3ab93881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed-ivory-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3d8824a6923369e54e669ab24fe02a7eb3453cd5493f963db538d0efa37edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce-gray-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d38a5c347ee8ad1eec27f8fd38b04da804835f08ca1045d0eb138a247af6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-salmon-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a10754935eac97ba8410c82ccc851606191e37ab2d9777cbdefe2ec315ed62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68089 Malicious code in estimated-turquoise-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b96ac3a8fb643a14c82c101f5a99835eb95dea2cd2a8468482eda1d7f54848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69938 Malicious code in positive-scarlet-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d93c4763da42aa36d7ab737d5d0ca6e03d72fedf3b37c7db01b2b4cb6918e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68838 Malicious code in inc-maroon-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d56813dad7dab93487b9e34a0db2719a81bedbaa861ef460b671ef4a3e379b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71500 Malicious code in voluminous-blue-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad91476de6c94c820fd873580c4181ef1c5a36eb37ff2a77c6c20b7576b3765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69260 Malicious code in main-fuchsia-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b3394a7972fa6f001e533ee6ed1a22f9a8719f5fa46028be013568e4a33de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68818 Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable-cyan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde09e4f2658c23d35c555d91b777541f2c6a963bc2d9ba3d496c6d004c5924f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-olive-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e798dbbd72850181ec6ef3befaa8822ef833714948a5bf4ec1d5c588f48ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70439 Malicious code in ruling-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46dcc80ef31cf47c1f96d0ed43757aa11369292da1f79f93e658eae25a82cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...