MAL-2025-67083 Malicious code in broken-purple-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cad4ba280c21fc1e43614e95dfc9d3296cecd0348cb0153725886c0a5ac473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70108 Malicious code in purezhax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c484aa032accfc0b4d4854c5c4bfc8a38558e9d8bc4e28292d6938eb7bba262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66911 Malicious code in awkward-gold-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a1a5bd365f6d1d96cbf438bef8da0d28c1df33bffbc64344ee5af752a58f48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70832 Malicious code in statutory-lavender-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daea7c3a376f1fd657482c86f3dfa492571788ae713e6daea507e51c6fa5d83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68260 Malicious code in fast-gold-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723aa1f2a8dd3f2a26517cc26f4264ad864c6232a91408e27ca3f3f274dcc93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71245 Malicious code in unconscious-cyan-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7340d4910ad29ad604aa2c5af8bc94867039aa1549086acc1730a6d7400f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-maroon-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6971363f2f77caf154260d2cc0d79347c015b6e3d510398e08784974cd4f1692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67665 Malicious code in defeated-plum-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d86b7f36e27cba938369bb2bfa863d7890158a29f305ab081cc2a47025216a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70332 Malicious code in representative-tomato-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1431ff863a634e38a9ae59402cd50dc17e59c950c7af1153079e2a0cfcb5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71093 Malicious code in theoretical-gray-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd6588c7e3301e7495a6d472a4a77a5526984265ea3846667cb9a1fe30b7ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67614 Malicious code in damaged-brown-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7e9ad811ee7126d7567fbe41b823891984378f252e95a6e598b30e8a8f4249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71242 Malicious code in unchanged-coral-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa345f72bc247454a40bb68a329340baa3a276d52af7995e480bfe73b64b6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66897 Malicious code in awake-orange-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7a7d451a9a3d9be93b378099ec4a567e024dbd5ad9edf0d1cfc410bf3605b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67192 Malicious code in chubby-moccasin-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5e12307fff9bc985590e90c0910484ad9d555b8ebdb12dfd22b8bdeded8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7544ec1cadddaf841dfa15e92e54adea6aa8cb3dd8242d0bac825e2e2a4772b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-mendut5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd916533008818b38520b4804cf9c72d2d5b3e0fdd50a117adb60366ed341ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-mendut46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0532b7440891b42bf855bc7e11e307592668e013f9251cad5e327f65c30dee43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kue51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4a7c205a500b350c408757bd48d5555bcf72422c8972d2ac89938bf568f0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-serimuka22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef07ce233f647d8e9fe189bd28e153e59d56ba4c0fcdae752824ff2b17ed0f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...