MAL-2025-67036 Malicious code in bottom-white-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86053435bad461d822944e119a6134dd7a3b29a7c8f7741ce9842e9eee650272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70596 Malicious code in shocked-azure-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09e521a86729419485e3c1a5190a3b603635aa501f2ce013b668241878f1522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69423 Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71353 Malicious code in upset-indigo-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfd230402a7353dc2bed37c90ff25d2275ee7279dda848420d91b8a8d1dc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69376 Malicious code in mid-scarlet-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6570910d58510c3e2254114cc507d8e58a3e530ae7462c04c48fd17f368b6889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68545 Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70160 Malicious code in radical-gray-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffa2c14f9d3d6661af4107f81c2efd9f50f7c9585ad02aaafaf99e808ec35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69591 Malicious code in negative-gray-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078412383c8d93120bca3a4dc0acaa725b6a8d55970573c3e9f56b2ac667b781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67580 Malicious code in cuddly-orange-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f62b7083ebebf20a9d2f2fa5551b50093bfabe75b3cc25775db1f7eb13eb224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68139 Malicious code in exceptional-blue-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b0547e30f7bb08e5d008982a0ebea60798d4f072976462dc6651926705ec5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71589 Malicious code in wilful-gray-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147898f1426214cd81d9b6a860619d476d6b506afa9cbd24ced16ec055b3ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70039 Malicious code in profitable-magenta-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea1718a0859d2885ebbdfece95aff118ddaa16dfcba31f957c34792fb9fc036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70268 Malicious code in regulatory-harlequin-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4968753ad38701ba2dfe12d95e50fa0c65b03487d7b4e6f8539ab31338e596c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70041 Malicious code in profitable-tomato-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c865667f7aa79c8c5377d38db9281943b1e983daf9e4926ad3d6ce2f9495de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70773 Malicious code in spiritual-lime-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c1a7bc12603a05eae6f51d99170667a8b6aea2a48bdc34820f60bc2e03f1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69047 Malicious code in kimyoonhyeok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f409f0948b05f83e888b8fe267cfe72a62d4f880b05b893dc08281f16aca6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70257 Malicious code in registered-beige-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807a307b323b28236f1e04d5a92d8ca00fe65c41cd31a53af3cb400d90b819fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70869 Malicious code in strange-turquoise-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efccd9cc26c1c59aec3842cb453f94a074ecf8697af5eefcd3d37a0062acb402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71340 Malicious code in unusual-coral-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acade8225a1059f0339a9b5e33795261cb49cdc30f454f3d783fe782bde1f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67110 Malicious code in capitalist-aqua-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79a4c0f9e239fbb3b9ad2aac1ae4088bda384279cd4258fc9089d8701ff5893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...