MAL-2025-69998 Malicious code in primary-coral-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960fe0a29d9477638d2a90cc3146a0571d7097943865036f4d909f6b13dbe54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70784 Malicious code in splodgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635bb69498e19604f01e9fc9b7c6651991ac9856ad03fb2bb55859b342c0856e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67716 Malicious code in dependent-black-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e81c883be00c141542889518096c330e3efeb5bfe160578795164a3bb73037d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71230 Malicious code in unaware-gold-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b2ec55d6993e9f0f104898e92c211dae3f7d54c959466a815b88da2b48841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68791 Malicious code in immense-blush-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d5a7cb7f302bc0ec0357cadd51a54a32acff72ca51ed606c0ea04239bc1ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71286 Malicious code in unhappy-blue-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0c297d6589646cc19653d09785ea62e811693d0b9d457a2f23d7be775f3f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66631 Malicious code in acute-coral-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94ff038c92cee08ecc4449683b44005c35352944afbd96d38351ee85bda4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69028 Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69707 Malicious code in okay-jade-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1145f4b6460cf1b857bfecc6f71b9ba9a3b77847297ba5eb1d76b580c11500b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69754 Malicious code in organisational-coffee-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67ac3c0e56dcb91798049a350fce5eebe71a00c3d3908094079d9cfe2c8724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70146 Malicious code in quixotic-cyan-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b2250d1a058a8941290f3c25f2ae9082763188d34dc023e793d26cbf672c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70350 Malicious code in residential-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8021bc028659f460cf303cbb57879efe8a03c5305fac5e0e863656863ed3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66565 Malicious code in @bipyruss/radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7b7af17b7b59d66edaadd9aa13195e7886b7e23905dc09eda5ccc360d2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69842 Malicious code in past-olive-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede04629d7df5e6f92566df4e78f2786b661bf06b897accd4826fb99383fc717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69194 Malicious code in lively-white-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3e2a4ac260f16b02123f0256dd2c73910af1b6328e0b70d2b253898a7068b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67116 Malicious code in casual-beige-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6624c0706b9e97eb42168dc94dd68807cd10f64a88a872b20ddf9dfc3f4ebe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70574 Malicious code in shared-gray-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651fda6b3b6e3ab7abca40dc135408b298dd8ac1943b33f5a069272538df2489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67621 Malicious code in dangerous-lavender-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b1f52f6e6a13504c6a59cfe36cb0ec4c188b6a036495d712438762806efcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69700 Malicious code in official-chocolate-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9802dc82b8e685ef80e979e433f32ad19d859031ab4506373d24bd68d3c92755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...