MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71242 Malicious code in unchanged-coral-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa345f72bc247454a40bb68a329340baa3a276d52af7995e480bfe73b64b6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69677 Malicious code in obnoxious-amaranth-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df819eb8e33d66f6817bfdd6525fadc7c3fd914b1327eae1d29e2cfe3219a2c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67665 Malicious code in defeated-plum-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d86b7f36e27cba938369bb2bfa863d7890158a29f305ab081cc2a47025216a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67192 Malicious code in chubby-moccasin-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5e12307fff9bc985590e90c0910484ad9d555b8ebdb12dfd22b8bdeded8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67875 Malicious code in drunk-moccasin-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9861864ed1d1e112b6ff9ebc0514327e89d31f6edfff512f407431e47e93664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68260 Malicious code in fast-gold-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723aa1f2a8dd3f2a26517cc26f4264ad864c6232a91408e27ca3f3f274dcc93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70258 Malicious code in registered-brown-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6a3a5f590915da2e47d168becf2d4e42606df0354ad4c559e01fcb3f575a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66911 Malicious code in awkward-gold-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a1a5bd365f6d1d96cbf438bef8da0d28c1df33bffbc64344ee5af752a58f48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71245 Malicious code in unconscious-cyan-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7340d4910ad29ad604aa2c5af8bc94867039aa1549086acc1730a6d7400f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66897 Malicious code in awake-orange-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7a7d451a9a3d9be93b378099ec4a567e024dbd5ad9edf0d1cfc410bf3605b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67672 Malicious code in defensive-purple-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad86837ea4129c2d11fb21af600ef2be7a665093687ed76e93781772a9314e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67083 Malicious code in broken-purple-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cad4ba280c21fc1e43614e95dfc9d3296cecd0348cb0153725886c0a5ac473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69142 Malicious code in liberal-maroon-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b040fea466f31ea7509bbe20a45a3ddbb3549c0f17346ddf08c724ec94da1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67512 Malicious code in corresponding-turquoise-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 034b4fa629e7048138f9fe5df8109222a30becc6326c9fc238ea763e40690559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6641c3113af48a7c84bf316880d2c8300c6a11f42b0dff0a4788be2e11813f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-ketoprak9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f07ee7961255024bbd33ba9a84acb22952e39373a0258373384bff77941f8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-mendut46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0532b7440891b42bf855bc7e11e307592668e013f9251cad5e327f65c30dee43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakso11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee8ff6c725670d4dfef1f7aec96c1ba3b1ac485954c23a122c49852ee4851c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...