MAL-2025-69870 Malicious code in persistent-beige-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a801573b48932b8e64c285db902a0b5407607008fec4583c661922b0e33661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67669 Malicious code in defensive-green-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df0324c8bb8eed12214cf5efd1c46850aa70ee1cf7e6b35924804581422169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69952 Malicious code in practical-coffee-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfc0d392d6fd20db08d26e1cec2c4d440b9dd119b16567b021381716f6af451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68455 Malicious code in functional-fuchsia-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cfb1a2c0ba9dd90e0f80f4e706aa77d4c328ed49db749bb6d8df4f63b81946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71558 Malicious code in wet-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257acdbc69da100c14073df4ea73f72e7fb7e3e6f815b1974e3439680a52b43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70679 Malicious code in slow-violet-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c38d12a62d992bb4178b3b0bc08b55bb74212dd2ecc2968ecc5f4de78098327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67525 Malicious code in crazy-amaranth-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545911492793ed2d6c2a3dc925efe9a434da5e568bbe565ffa3d61d6851a390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69364 Malicious code in mental-turquoise-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bea37d9ebdabcb541c0dbd5823ab75a5d1b6ca4d5a398facce1348448c7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69070 Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69132 Malicious code in liable-brown-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9fce6b61a6aea31ac791123bba3a5d485f5941d7aa3565219d81cb736c7180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69553 Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66702 Malicious code in aggressive-coral-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31e197dd17d33d6d7382d8683229cdb0ce761afa105baf2ccbf16e3fcd8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic-gold-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ead1f36f6e54ec7ea92506786df8899e9028cef25f59e83a39ea79b564d02fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faint-brown-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b5c19a377aabec8ce4ffa35bac9aef49511b63d4c8f55f50e50cb87927d400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper-blush-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961d8e26715ae97044a0ec40a75d5e90a5ee5739627aa61b7890ecbdb7fda984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious-black-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf07bb8de4acabc348885baa04e99de56d78d5782f5b2116615ba1e1c4872e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-indigo-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25f560aa3d5a09d62fa1dc6add08e7a1c40637dd271616fd8e3bb2303398eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...