MAL-2025-66700 Malicious code in aggressive-chocolate-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece94d09f87ed47b7aab12159e5ccc37d8feae1c28a6da7c40cd19a774254722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70994 Malicious code in surprising-pink-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9690d6a1b8e7dce10554f1198ab97e597bb1ce2c30d9403b30d28c2bbc1f02d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69322 Malicious code in mass-plum-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c150a916bc8e026094eb584ae62e81f7c72fd45faa1b7940e731af5936b540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69192 Malicious code in lively-gray-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc4c7dc19fc1cd092969e3a824e20c12f3d31067f221559bc343affcae20d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67582 Malicious code in cultural-emerald-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c86ccedf789381c57cff1c4151372c07d21f9b1ee4be2c10c703773a8ecda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67294 Malicious code in colossal-jade-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded18d3e83cb71125ee2ea44a631c080b5e7b1ee4dd1fe13e130b334e93f886f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69445 Malicious code in miyool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa95da6580df72388a2b491f52c1756c733e7383660348c461a4a412f66ace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70531 Malicious code in senior-lime-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005cc18c2a29bc6b0e090d348db808eea0a1d3d031df3c0a1771661eafb4615d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70634 Malicious code in simple-purple-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5692a08de852c68c3a0e4375acdcf1665c25b39a9d643b0e191fda06b548f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71364 Malicious code in urgent-peach-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d609d2d155bb402e768b17effa6fa4c41eb5fa84cd06bd51848147c2e9a1163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e4e82b6ac4237782b24e7e8e1a8e446bab2596f17113c59e31a81d9ee7943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-olive-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e8dcce2390235a89528e3abdf84a3fd3cd54b1f7b2b010b53a7a060c0c12b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae69308a597c1676f4f4a1fb2c4eadcfea25ce30cc0e5b045233814fb29851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric-moccasin-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503093c035614f8baa37cf3e544f3bfb46bf9e6f5bad89b00a7e683d6a7dbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liasuren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4ac271aa34654ae9893bb23d430de7d1d5aa82c542fe7d2b1f30d724627fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-coffee-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdb471f1a3e5cff8348003194c3ea4d7198c60743bf96b93151fdf5f8db0a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6627686f131b3f859b422f1c842cbad7d2ba637fc9b6c34b91ba057a50e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful-black-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ae53f2eb52578199cbf8d0beb90794928f64f8f4236e86598d647de3d1d59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal-amethyst-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fd7d22fd794d7da9546a8ffb3d4e6f09a6a7862e5fa65d409a937f456704ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...