MAL-2025-69566 Malicious code in naval-gold-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c25a2b8d868d9b0ce0c1e231ceecbb6691c3d35a95c7e7938779faa479e39ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71330 Malicious code in unpleasant-black-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e559e8e544c85b20ed045147a6c541bb7641086ab63a23534f5fb1d9612becf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69767 Malicious code in outdoor-maroon-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33262368c329847ad0488383264617a4631fe8079c77b6108d09f36d14791168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69957 Malicious code in practical-tomato-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2633e7a9d278562971e96f470d33db2791b9ce1f4af3e99d64ec960c8aeab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68298 Malicious code in fellow-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b65dfb69fab55d5b92b3c66106faff9a9b92fe6ed6ea8319bf227e93e5a7842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69041 Malicious code in key-azure-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b720d4a2e1deb969ad0516605b932efa83748b4c017333e143a7b7e49bf2ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71484 Malicious code in vivid-chocolate-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e489cddaa4404a17ed2d807695dd1ab0eaefa3e01aec3d9f272e7b902ab1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68306 Malicious code in feminist-blue-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c312875fd2feac445324e9a2be83a027eadca1eea1c46e5225c00e1268ec5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71442 Malicious code in vicarious-chocolate-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a833bead0cc4cf135bf30e46c2d0a69c42d2cce9203d138a1abc50fd9471b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69646 Malicious code in novel-amethyst-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd432876945a18ce13a4486fad9082f2c54df73e596f727a05318e75a899f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69332 Malicious code in maximum-white-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c02c7ac59b593ead2e56fea626acd3c9abdbb47164b3a702aeb4d7ee9fa9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68396 Malicious code in formidable-red-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64aca1c5f4d6f4b9000cc4868120ee799f2ff28512f8e514d98485b3442179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69724 Malicious code in opiumoee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449e84d7c04ae3ea4ad4a0a53d4a0753731402b5535db365475096a2a2765e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69419 Malicious code in miserable-plum-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172a73c7b4003e0719f1e716a5ea303e6e87dd3a4925a622a0f7b9ef11b679f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71093 Malicious code in theoretical-gray-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd6588c7e3301e7495a6d472a4a77a5526984265ea3846667cb9a1fe30b7ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71688 Malicious code in xingyun69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34cd3f36fca407da1cf325e7afedafaaf12f8a3f888ca9a7bcc9e791076228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...