MAL-2025-69702 Malicious code in official-pink-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5000e62f06106ab11742d94e64d45a09a2614570a774a4e9ca73c455ac0d1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69249 Malicious code in mad-sapphire-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016ba71d837c76d976017acd082d0336a151fbf8e277c8b325ca36afe78b8ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67217 Malicious code in clean-plum-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b020a45fc8bf7a15b8806a067847e679bf9e1251f966b2023d922ce1af044e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69764 Malicious code in outdoor-amber-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071f333f0d37b6bf2a313cc2a41cbe847a62a33ca509de552a59db3fd3e6defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70790 Malicious code in sporting-amber-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2f626000b197e3979037f0b4b999f6a9a2009d8626b1424b2d4b20bcf24691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70116 Malicious code in puzzled-olive-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2eb697643089c881fe8ef8d740df7783292be65b2a331c4191f4524afa98d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66956 Malicious code in bewildered-rose-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f77e32fdc6eb95a1a2a81fab398e5fa00a338913b8dedfd48553b3fda475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71413 Malicious code in varying-black-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2009a82de0281b69dd2bca9ca9457922a5fcbc565ed744175db5a280c703cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67353 Malicious code in compatible-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ddff50ac37b1d4ca212d4388c8e24af0fc8cb7b3f0044ca24975dbafc47461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71467 Malicious code in visiting-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3ac39b09725eed37963b2278f501e3a9fac0287caf253277b36d66f8134fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68835 Malicious code in inappropriate-violet-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c60476c0edbc66181408ba98997d71686533b1a0a9efc28141b67e96856f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70431 Malicious code in rubber-plum-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f2cb293c3e9b155198b19825e766b2baaa70fa6c95e79c1ce1450bfb95c17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69030 Malicious code in just-olive-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2b3b7482758c1f0981d8192d5a9472891ef33a3f9d9e9e3e42c6f167eb1755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71787 Malicious code in zonal-blush-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5f64167bee9a32d3fff70092b8f5587f68709f03d1ef6a4eace69e31d706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70841 Malicious code in steep-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8821c2cac5fe1aa35260bc2bd9e51b7e139130b9049e16b6ebfe568a86c3f5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67450 Malicious code in continuing-apricot-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a8d62412e7e262a9f6ba076dc6d37f4f54922879e7656aa0ebea3062d7910f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70995 Malicious code in surprising-salmon-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a05c7e6f5b0389b624ef0af5f621190f9f72f54b9c490f49e3924f0edc24f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69800 Malicious code in overwhelming-lime-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a2b2a820eb3357dbe28a474bc68cc5331fb211f6b0a76287b86dbf08c026ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...