MAL-2025-70146 Malicious code in quixotic-cyan-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b2250d1a058a8941290f3c25f2ae9082763188d34dc023e793d26cbf672c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66881 Malicious code in automatic-plum-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce5c5f3d1a7a60724ea48d6a0fdf8320094d9f6539469b33a0a60a8ee63fd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68791 Malicious code in immense-blush-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d5a7cb7f302bc0ec0357cadd51a54a32acff72ca51ed606c0ea04239bc1ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69044 Malicious code in key-emerald-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8950f91d59215f3c6694e5a9c7f1403d26bbb5d739b75dea3327cb78e5d05c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69077 Malicious code in leading-green-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c4672b4626690401117fe6fdac903a5be244b1679a2bd09b81972b56a6eb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70818 Malicious code in stale-jade-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a86a4e334e992fc56fa4804eaba3c91ee32182bf469d26d05c25ea7f1da636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67716 Malicious code in dependent-black-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e81c883be00c141542889518096c330e3efeb5bfe160578795164a3bb73037d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67116 Malicious code in casual-beige-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6624c0706b9e97eb42168dc94dd68807cd10f64a88a872b20ddf9dfc3f4ebe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69162 Malicious code in lilysuesu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7fde76e12d7b6be041acc86adc1a7085af7bcca0b24d874c16467df99dd751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66565 Malicious code in @bipyruss/radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7b7af17b7b59d66edaadd9aa13195e7886b7e23905dc09eda5ccc360d2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69700 Malicious code in official-chocolate-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9802dc82b8e685ef80e979e433f32ad19d859031ab4506373d24bd68d3c92755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69780 Malicious code in outrageous-black-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302076df9010268edd1c2b746ed68eec2950df4e8476a2dad81167a29fd9ae0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69194 Malicious code in lively-white-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3e2a4ac260f16b02123f0256dd2c73910af1b6328e0b70d2b253898a7068b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71656 Malicious code in wrong-lime-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909de9319a8105f536fddb641b6ddb587708a9cc3785cfa30f848fb65353754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66839 Malicious code in arrogant-fuchsia-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2897622e4d93a3c77dce18b0fe97f75f6a3801126fc910715a3aefaafd694cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69707 Malicious code in okay-jade-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1145f4b6460cf1b857bfecc6f71b9ba9a3b77847297ba5eb1d76b580c11500b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69234 Malicious code in ltd-blush-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01dbae6dfd728b0d2e13f66a442362a30e572edaeeefbac5beb4df804e25529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick-copper-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade15896f0bd0055fce68f9c21289c67fd48e66d7dbd92f2dea6367604d98be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-olive-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0940f9791e0d7a41a57b3916d05a6362323a0d6e840d65a31ada4a11f4225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-indigo-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8052b473721331e357824eeb7c41e0259df26525aa5d99997f597acb2f0221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...