MAL-2025-71341 Malicious code in unusual-lime-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99994ecd22225f62177514f5bb51f8adbd96da05fd6248b8ebffa5a0323e406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67156 Malicious code in cheap-jade-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a81d3659d9fad15ce97a4bfbe71d73124eefbab59b32ef6330f292cbcd96a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71673 Malicious code in xenial-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035391b18ecb6b6da7a0cb471917359ee2c437aa3fdea6311e561e2665844e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67217 Malicious code in clean-plum-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b020a45fc8bf7a15b8806a067847e679bf9e1251f966b2023d922ce1af044e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66948 Malicious code in better-amethyst-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96e482b4d6b7a93595afbad1fbd56cb97264b8bb09a9158139f2b343fbf1efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68954 Malicious code in interesting-yellow-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baf605dc0172666767e140b9aff0bd3d89cf7ee0b3d2a5316ead0c32bc4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68951 Malicious code in interesting-gold-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1b0c7b2f6c50e495e05eb1fce1e6c6e892b8eea7d89107a0049a78f74977be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70871 Malicious code in strategic-emerald-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518b134199237eaf5e1baabab61a32927cebfbcb3b66ca2443595a0318c6ad46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69961 Malicious code in precious-aquamarine-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392ab7e4e3b593e707182fe8a995a31152a5657a44d11eacd99aec8562953789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71142 Malicious code in tiny-amaranth-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e9063f345f407edf15ce0bca25c62dea86bd6c812c68c66d90eaf10ab640ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68664 Malicious code in helpless-plum-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1001041a5344d10719f28fb3150584b7bd6be31b08850bde799cd0965387e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71300 Malicious code in uninterested-jade-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b89904ee9d26d7b27216c044ae57ccb016a79b28be0bc69f94be3e1c6f97f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68802 Malicious code in implicit-orange-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edda98ec0545f06e72ae32c79ec4f541b81837034de791396beca34b8d65d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66731 Malicious code in alleged-amethyst-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc98614f0330f1b155a116a05748162262d4c16a399677268d6beea78157cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71050 Malicious code in tasty-green-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca26a3527b4ed9f8d552622389bfb350aebbafe1e1e08a436811e6bdefe51d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70725 Malicious code in sorry-amethyst-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f8cc503fd0df600266edbf438a3bb1c19fbac142131b7489d93bed5595e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69237 Malicious code in lucky-blue-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5b150fe3736201bb9e00c275e0fb956ba6629240baa502e0c14810ca541646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67398 Malicious code in condemned-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68067 Malicious code in equal-chocolate-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff3e0664cb0930af4c469e773a480d937b576f02d3217330bf074b3e13314b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67659 Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...