MAL-2025-69307 Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67240 Malicious code in closed-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c259c0f89aff7f17c0063923afb25394201fbcbdd2865660ec945c6b8694a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66837 Malicious code in arnecx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0890fc873f87e37d5296c5f26e0e7d194277a2a589f0848e17850d7d4fcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67750 Malicious code in different-coffee-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa81f9c14d6aff944c400d9139194ef32d9b1c268eec2c87b74cdf57f5616118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68854 Malicious code in increasing-lime-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66a128b610a371f80f8da081595a03acffd0230352082126872c1b5d456fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68891 Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69423 Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70442 Malicious code in ruling-salmon-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f15726de6e2ad29aab11659f5261364fa17c58a75786fd919a69de2a427349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68927 Malicious code in integral-green-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2741f721690a7673d9a821f68a28d09272b673b1f1ed7c70be4f5cd90316c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-violet-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea795bfe44fe4667cc7c648ba9aa25928906582ccdb1a9c9108adc9dbd41eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-olive-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ac10842dafaac29c25240868e9f716fbc18a8e4e8dd28f8ab52982d5363227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68047 Malicious code in enthusiastic-tomato-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e35e2dc983ea87210a60ebe7c84b0d86e482639d7e7b501c9fcd372b8164ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68953 Malicious code in interesting-magenta-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35852c710354f1f9d000a925da8839bee1235db7a21e68203dd579392cea17f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66679 Malicious code in advisory-emerald-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1a85f3a539513126cb7696ba6c1c970d9774e4c6366d656314ad578c5d182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70141 Malicious code in quiet-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3bd0edb2552011ac222175d729fb3e362b9a78009e25d45787e4950496c7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66704 Malicious code in aggressive-magenta-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c23a57b45f390648f83ce35cbaa37f6e384aff2d3b07b76423a8e31f0d14ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68062 Malicious code in environmental-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5edb1ace0966574a65cecd5e20f11c555d3820e852a59279e790ea85e41f801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70305 Malicious code in religious-yellow-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e26e9e69dadbc1dcc38b29eb053cab96ce7afc3deca3f3597e2b8d04c0282d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69629 Malicious code in normal-cyan-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb5f609caf52e546410eb31d954d6b07f9be422a3a71a1637f86b02f674ea0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...