MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66948 Malicious code in better-amethyst-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96e482b4d6b7a93595afbad1fbd56cb97264b8bb09a9158139f2b343fbf1efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71404 Malicious code in variable-chocolate-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc5c87e44fa0ef20264749544b88c160bf3b4693fbf25a951b992f44755fce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71600 Malicious code in wily-plum-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5be62b927e61034377c98b8d0fea17fe89133d437610d0e41e4dbc53b9d2c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66639 Malicious code in additional-copper-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812ceae987943be1a55957836d51175c3abae7bc3c6dc793fda417401f143508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71467 Malicious code in visiting-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3ac39b09725eed37963b2278f501e3a9fac0287caf253277b36d66f8134fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67489 Malicious code in cooperative-blue-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2159e27af3e49e0a543606bc3bc0c88b549fbae9734d73af7a2de53cf1a8e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66956 Malicious code in bewildered-rose-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f77e32fdc6eb95a1a2a81fab398e5fa00a338913b8dedfd48553b3fda475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71237 Malicious code in uncertain-sapphire-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f295e8dede1a300c83597847ee5f13851fe2e9ad941c5187fa925677f2de5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69891 Malicious code in physical-sapphire-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad77ed563c99d336f3278f134c27480c3512faf2127fc6bf8556ee20e3bbb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68934 Malicious code in intelligent-indigo-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3236da44132a0a7b5ff1862e026c36e0ffe678bd4ba5712d8f81c344df78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68834 Malicious code in inappropriate-silver-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab481d663fcab2bda857940c929336287921afc510ef98b5e641eb9a263a7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70726 Malicious code in sorry-aquamarine-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f80e12d59762981a75a72dcffc8fd6b885219c3496fefdd7a8ab37fc7d88fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68664 Malicious code in helpless-plum-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1001041a5344d10719f28fb3150584b7bd6be31b08850bde799cd0965387e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67217 Malicious code in clean-plum-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b020a45fc8bf7a15b8806a067847e679bf9e1251f966b2023d922ce1af044e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69237 Malicious code in lucky-blue-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5b150fe3736201bb9e00c275e0fb956ba6629240baa502e0c14810ca541646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67398 Malicious code in condemned-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67156 Malicious code in cheap-jade-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a81d3659d9fad15ce97a4bfbe71d73124eefbab59b32ef6330f292cbcd96a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68954 Malicious code in interesting-yellow-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baf605dc0172666767e140b9aff0bd3d89cf7ee0b3d2a5316ead0c32bc4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-gold-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869148705d3b12cb5c667a354ad4e4bc63a03e0121612a3e8e369f98691e4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...