MAL-2025-69237 Malicious code in lucky-blue-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5b150fe3736201bb9e00c275e0fb956ba6629240baa502e0c14810ca541646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69331 Malicious code in mathematical-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce8b55f5fedffa444a7bc63ac7eb81db4c2edd08cc80ac9d04120c1051e7a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71179 Malicious code in tragic-turquoise-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7047b46fb97c7b88536d39495a563ab82c6bacb7af53d231399f7c55a7c66509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68078 Malicious code in essential-coral-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0750ff917e95d976d044ee0850289b332a7449f3d605c39aa56ce1688c885c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71237 Malicious code in uncertain-sapphire-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f295e8dede1a300c83597847ee5f13851fe2e9ad941c5187fa925677f2de5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68834 Malicious code in inappropriate-silver-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab481d663fcab2bda857940c929336287921afc510ef98b5e641eb9a263a7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66602 Malicious code in acceptable-copper-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c4d488e2b83fb64622a88c2da565b42248b1bac346d25ffe38e09394213200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68266 Malicious code in fast-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175116f086b8d70983393da40e15c19aca1da52bfaa3d6e6c99e9e1ec3080778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70726 Malicious code in sorry-aquamarine-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f80e12d59762981a75a72dcffc8fd6b885219c3496fefdd7a8ab37fc7d88fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67659 Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67986 Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68802 Malicious code in implicit-orange-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edda98ec0545f06e72ae32c79ec4f541b81837034de791396beca34b8d65d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71300 Malicious code in uninterested-jade-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b89904ee9d26d7b27216c044ae57ccb016a79b28be0bc69f94be3e1c6f97f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69854 Malicious code in peaceful-jade-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1feaddea1bc30b653668b480992ba4e97d413df94af05a3f700fb445c46c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71404 Malicious code in variable-chocolate-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc5c87e44fa0ef20264749544b88c160bf3b4693fbf25a951b992f44755fce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67217 Malicious code in clean-plum-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b020a45fc8bf7a15b8806a067847e679bf9e1251f966b2023d922ce1af044e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70871 Malicious code in strategic-emerald-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518b134199237eaf5e1baabab61a32927cebfbcb3b66ca2443595a0318c6ad46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66956 Malicious code in bewildered-rose-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f77e32fdc6eb95a1a2a81fab398e5fa00a338913b8dedfd48553b3fda475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-violet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22ce9f3e331de55d5e56b36cb03d4947cca10426c7730ca4bf74917311db80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...