MAL-2025-69043 Malicious code in key-bronze-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918362f96b1d4bd3f7de44ad53beb5f397524b25a8ca7603534e6e705049763f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70651 Malicious code in skinny-moccasin-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d16f791dd03bcdd9981b1b0bcc272b3c56162980e28e739786c6f138f8b3211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69265 Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70986 Malicious code in surprised-aquamarine-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc30e1022519c899a67877ec078a99646e1cb24196c99f9a17773a9e7f3240e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68901 Malicious code in inner-coffee-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb43827b00821192d87d2a4d4845c49c20d444a2340c9207a68c747d14b9e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71649 Malicious code in written-azure-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0986ad15a73a8fd29d8f24e25dad0cf708482a0fd2370a73d604ee85be9333c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70974 Malicious code in supposed-violet-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716a517adacdb1b1bc7bad95b18ad4aa10f700a7c568a3e7f430c18344f367d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68528 Malicious code in glad-maroon-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223b726237ce1ea3ffcc80a32aa796ed9ce6ce12bd37b40a6c219f8945d4a649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71060 Malicious code in technical-tomato-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2728d7d6fd73cada4be0e42aa3623f21d9f8b39cd25fee3a39719cf29bd61a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70675 Malicious code in slow-blue-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6a6593e38a953c780abf4b32e6b24c5ac37c16fba6eb8fcb091e1f01966ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69966 Malicious code in precious-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a868de798424f93e115ba5b1142747f04d89aec910d57c55a7cf48a5e9f46feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69635 Malicious code in northern-fuchsia-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b866ee4bdc32a8fb593cfff25d650cd7471c8113ef86d28f5af1946db07289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69527 Malicious code in narrow-blue-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1271707ba1fff1cdf4b58258e4f4f122ec45b2468f44ddffd7e95a2cd4b45d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68624 Malicious code in handicapped-amber-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74275bb43e600994eba90a00faacd7ece9a298979a3fbd3d186de95ac52e9b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66650 Malicious code in adequate-white-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764b6e412e43ab93f8173f2d4ce2680beae95dac5fa4f020ae41c4f9ed61d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67493 Malicious code in cooperative-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e928c371bbce7e03c440149b75394901ead046b239fb523659f28a406bbf0e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69757 Malicious code in original-gold-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72743afea14a8fdcaeea05d149201c7be371c9b0baa8157c1dd64b75d757169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66992 Malicious code in blind-red-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c52e2448d9953490fc66339c18c799fddd447e39bf4db3f03612d483fc16d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71705 Malicious code in yawning-green-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52aec9f67ce039bf09f84f52da06466460c8153560c330ebb96e914dcb0a39f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...