MAL-2025-68391 Malicious code in formal-tan-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b7af47f718a58247cd0b3e993a1b866a6d6c0aa4cb45be4b226903f8ae69cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71787 Malicious code in zonal-blush-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5f64167bee9a32d3fff70092b8f5587f68709f03d1ef6a4eace69e31d706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71119 Malicious code in thorough-amethyst-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0397318b7b2fe19b02dc65ba5d0e83dfcd6ca2adc224522b9bd51e03bc6d229b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70995 Malicious code in surprising-salmon-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a05c7e6f5b0389b624ef0af5f621190f9f72f54b9c490f49e3924f0edc24f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71066 Malicious code in technological-olive-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4842d4e25bb9f194a482745f542216c9ac2ffbf6a6d04ef7e75ca862dbea2038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67108 Malicious code in capable-tan-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d860e833ca394aeb9e14b4db0ab0b492bf12fdf6770bf82c3ac8fe02d27d914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70551 Malicious code in sexual-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6151914596df3e7fbc5bbb5b6e9bb4d0dd14880e46382f26ea90ab5e15d023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69249 Malicious code in mad-sapphire-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016ba71d837c76d976017acd082d0336a151fbf8e277c8b325ca36afe78b8ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71615 Malicious code in wonderful-brown-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28e9dcf4debea59313d009aa1783c545662e104027d32a9bda5db68d96df695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69868 Malicious code in permanent-ivory-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31778d88eb79a1f7cb8a2148562b5d621874aba2473ca6a6387528cf9f01663b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70609 Malicious code in shy-crimson-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c72ee236a89fd80832a38ac814cf8e4f8c2a3f4277c7aff3a0af2cc68386a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70217 Malicious code in real-amaranth-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6754fb3e9d45c6f94db2de33517e938ccaf2f2088d79a0fc59d114e5985b3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71351 Malicious code in upper-harlequin-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4cee288100818251aa89a1f7863a70a4a1aee749de4862c29c60607e969805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71756 Malicious code in yummy-tan-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5185cabb96f550e73a8c0a89645acad905fcd5f859edc4aa0652051859c7fc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67774 Malicious code in disabled-azure-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9b688875b4c9acae2cbc6767ef65a7cb30911bb9d740de8fb51c7dca0efea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71778 Malicious code in zesty-gray-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eae6d36a89a09ca09387838d7e4f30ec40ee4d4a5bf02fcabad6a79f9528bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71531 Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71333 Malicious code in unpleasant-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23be83de8103e298db4c796d0fe67aacded5e99439f0a72b4fa49124ee1a459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68053 Malicious code in entitled-apricot-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f1a1f87eebdcfa71e0d151c7abef90d5d9b501676fa011b5e489452a58ff6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...