MAL-2025-69307 Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71447 Malicious code in vicious-azure-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69319aed9c8502f7e0b93c379a4b15e08a7b989777dd91ddef19930e43bc02f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69714 Malicious code in olympic-green-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6f9244db234f16daa11d564c4d76bc34f56c4984e7bf29fff5a6e380496ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71032 Malicious code in systematic-turquoise-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5189f884cfe7df5c9d999ab89b0f5c060e8a4a3deac4ecffc091266bdba9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69524 Malicious code in naked-gold-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d39f17e1f57905ea98cb159960424054786cf96b73dc5586d1c624fcc92adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71146 Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69444 Malicious code in mixed-salmon-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492e1261a398828bcdfbe71f1c4d320a266eb72b8de45c40932b043c50700d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69570 Malicious code in near-amber-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837b59624f12396356b94faf512dbacde076b3e0cd28c0bff0277c597c9b8f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69913 Malicious code in poised-black-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cea2af0479f03858062e4e9a7d55003710e044c27fa8cfea2406827f898d892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70792 Malicious code in sporting-pink-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe5a25031c4f272bd947aef59da9c71a992b82fbeb4323c1b47020967e4a2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68855 Malicious code in increasing-scarlet-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eccec2d0b6ea6c48780921b7d711e065f6890e6ea78def0423c66107fde8de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68801 Malicious code in implicit-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80713ac28a0a287d70171707490645760a9f94c8c115d9159082276af4f8e802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfhiichwan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15abafc47b11e84479382fbc160b2f7ceecc705d2aede60b6a0a43f0dd39a09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief-ivory-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ff092ca6a77baae9af5437a44730954436afb0a2c9a659944ede4fe769ed19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-orange-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc84769220d1ae0d2715861f7e7261482ca2e088c1949697891fdc3cf4518620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome-aquamarine-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490e42a61dd7d47d1346c34d1374b4907baf48c8c669ebddb979fd240807be1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-gold-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61bad47b0d5de42a99e5a8f18c2e50c6efe9d5dfae230ef2f19446a1d3a964c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear-cyan-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ef5d3298b5cc6abca8b99ae6c8e0092b3636c984a431b6fc496ed22ab74144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent-copper-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d68ae95ea1015f5a3297c6a7640d84219522fbc148131833d1125dc1896f4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...