MAL-2025-71688 Malicious code in xingyun69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34cd3f36fca407da1cf325e7afedafaaf12f8a3f888ca9a7bcc9e791076228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71330 Malicious code in unpleasant-black-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e559e8e544c85b20ed045147a6c541bb7641086ab63a23534f5fb1d9612becf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71490 Malicious code in vocal-plum-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c62073ec70f75b6d76ec5ca212aa636c435049267496cec64ea613dcbadbfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69118 Malicious code in lesser-turquoise-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975e41ce985e02974fbc00a6671cefe7fcb8972a7b5e75d385613da6ced25311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69398 Malicious code in miniature-lime-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2892d64a298f0de1eddc7fe8f5762c2b0991fbe3cccbfb94c042ec674924d040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70802 Malicious code in spotty-red-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ec9b8a9706ae5a56d9ac792e8c28aed69e37d0b15cbcf385d1944a5527fc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68009 Malicious code in embarrassed-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb020e40af0d4d4d98a23ac0f24edf4120b4a47b4ec8e83e4b443e6df0eb15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68336 Malicious code in firm-emerald-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d24a6ec7ceadba4b185809a7a27811f039157211616f3842c6766d080e6bf64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68609 Malicious code in growing-violet-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270b712d55bd8079f4dcedb5f05af8be3fd8e84d60b8108b5e8c54e1ee698b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68138 Malicious code in exceptional-aqua-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cba2b5128422d1b84ae9d6d861bb01d3f698776a2bf3976966b381c587cb3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68666 Malicious code in hidden-purple-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e5c20585cfa09363ba509137da16ed7ac133a76508c90d9e0ff055c093d52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69566 Malicious code in naval-gold-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c25a2b8d868d9b0ce0c1e231ceecbb6691c3d35a95c7e7938779faa479e39ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68119 Malicious code in evident-red-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68107c03ac01e909649fa556dff7a904142956bee71ee54979da9772867430b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71668 Malicious code in xenial-amber-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c31293da98e074ddc7cfe45b21bbcb5878fc3966d11cde424f97888f4d69f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67850 Malicious code in double-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f987dd55772f58325989eab3f896c50cb877ac0627ba36c16bb1e22731b33ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69222 Malicious code in lovely-jade-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2757083b03f8b24b95c963c0474ea5502c3e8bd8b5069df47004a3c882aa989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69957 Malicious code in practical-tomato-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2633e7a9d278562971e96f470d33db2791b9ce1f4af3e99d64ec960c8aeab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...