MAL-2025-70710 Malicious code in sole-apricot-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e43c86c1c4c0c72df8778635468c857f119e12fa5bab6f5aae6151f1d04e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71558 Malicious code in wet-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257acdbc69da100c14073df4ea73f72e7fb7e3e6f815b1974e3439680a52b43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68835 Malicious code in inappropriate-violet-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c60476c0edbc66181408ba98997d71686533b1a0a9efc28141b67e96856f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67769 Malicious code in dirty-bronze-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8b3672e79c743ef6a768816b5935d376af08ef3ad1646edef80de5df3a3b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70671 Malicious code in slimy-aqua-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3573b4e07651720281fe4b2ef9e6c87d3ccfd1c79e3587f155787a31eccf9144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70822 Malicious code in standard-lavender-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bb821481b582ce7e85ec94e08a8ca0bf3b8d703c1815873b6a1d70f8042ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68970 Malicious code in intimate-amethyst-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98228dfffccf4c886bf9b3fcded1ccff70a0cdc6d8e32f67e3c7b591cfe68087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67701 Malicious code in delicious-amaranth-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f678a35f7899a5000e4c38699729a434ecf46b8595e6b389250e7b2446978a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69560 Malicious code in naut11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809d2d5f9fca56b60d196e6b1e05df17f7786a48f4e09465da77ad3444271a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69481 Malicious code in moral-beige-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d349a0323e989306aeed79335a104fed1441eb0cc850fc058d8a9159e8830de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68455 Malicious code in functional-fuchsia-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cfb1a2c0ba9dd90e0f80f4e706aa77d4c328ed49db749bb6d8df4f63b81946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70116 Malicious code in puzzled-olive-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2eb697643089c881fe8ef8d740df7783292be65b2a331c4191f4524afa98d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69070 Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67669 Malicious code in defensive-green-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df0324c8bb8eed12214cf5efd1c46850aa70ee1cf7e6b35924804581422169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-indigo-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25f560aa3d5a09d62fa1dc6add08e7a1c40637dd271616fd8e3bb2303398eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-silver-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff46723e5051d67aa359bb74848302dba9ced28e1265d10c2a79987afeda3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic-teal-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f8d039f067a11023b228ee908aa0a31b610992b5403b55853d2e8b0a4ec094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval-moccasin-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0514163e90cbf962ea78b0d785549a792d381912b7765ce0b6fe924344acf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular-silver-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca98e1d53c46fe226672a865e61b24975c0b086c49dbc2fe271324f544cdd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...