MAL-2025-71306 Malicious code in united-blush-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9a6095fa00c3e180e7328d85cca782eb474a12ec8c5aa558c8f0f45dbf55e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68955 Malicious code in interim-blush-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d486806c5927decb9c67b25199876be373a69e4a86905ddf6937eb420957ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70039 Malicious code in profitable-magenta-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea1718a0859d2885ebbdfece95aff118ddaa16dfcba31f957c34792fb9fc036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67672 Malicious code in defensive-purple-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad86837ea4129c2d11fb21af600ef2be7a665093687ed76e93781772a9314e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71589 Malicious code in wilful-gray-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147898f1426214cd81d9b6a860619d476d6b506afa9cbd24ced16ec055b3ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71353 Malicious code in upset-indigo-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfd230402a7353dc2bed37c90ff25d2275ee7279dda848420d91b8a8d1dc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71280 Malicious code in unfortunate-emerald-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768e8fddaf8b6ce129e3ef011115e0cb94748f495f2df1d2bce1ce2dc5b99cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71249 Malicious code in underground-black-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b22e3d02456649490e4218fc1f205ee57facfd36fe7585f4ed7a5c226677abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67219 Malicious code in clear-crimson-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f57d5836e71984395d838b1da38fb7d3df74ce16584ef7769b10537ec0000f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70641 Malicious code in single-peach-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d104c60259de9fdb858f3f9e1fcf95afb0f78de21d356b9e36052fe5bb3524f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69841 Malicious code in past-lime-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e2ba882235d2532b00ca64149ff3a63128478bbb91a7e0955e70aaf992635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70434 Malicious code in rude-brown-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474b2e2f1329ddf5df1564ddd561454e5c86fff96a87098c4dffc880ecef285d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70160 Malicious code in radical-gray-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffa2c14f9d3d6661af4107f81c2efd9f50f7c9585ad02aaafaf99e808ec35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71736 Malicious code in yodelling-scarlet-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386224ece11d1f49485404fef7619030ef0da3f93a71eee5a0b9d2ac21b39a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68030 Malicious code in encouraging-emerald-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26138100e7ba165d9b1a63674836349f51c9a78f9e615103da550fc7ebc9e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68036 Malicious code in endless-blue-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855ec46d32ec3b98e4ceccfdeeaa05fe4fce0ac347aa7b29a0824983dcf1b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70257 Malicious code in registered-beige-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807a307b323b28236f1e04d5a92d8ca00fe65c41cd31a53af3cb400d90b819fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70848 Malicious code in stiff-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb369be696eca3294e5c7bd646b36bedda460ddf2dfc2a325526001a5debe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70096 Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68545 Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...