MAL-2025-70353 Malicious code in residential-silver-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85078a4c300ca03a9f342f762ddcf893875b316c76d5a5562ea4d2b18e6ddd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69352 Malicious code in medieval-amethyst-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce66c5ac0bee9a840c121fe807ea4a8265e2b056e5ac60d67a02503e3be6cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70780 Malicious code in splendid-magenta-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93e5d888cd2fbd2a767ae8ef95bb231814cbd1472855088477bb4ca249a9045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70763 Malicious code in spicy-aquamarine-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf609eb7f5e1dc8326629d6d2301bc431965fd167226265c1e5d46e9ad136bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67132 Malicious code in central-emerald-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66808 Malicious code in apparent-lime-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8a038ade898b7997a21e5ff5622600d43f730b4742d8795e141225970b4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69588 Malicious code in negative-amethyst-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce0874613509194df5cfc8f3cdb57897ea0c0292a2e6af264e1374cb4f71d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69494 Malicious code in muddy-salmon-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de26ff577cf8f93895f8b3017e31b06399d6a83a642f16dd9420952661bb8f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-aquamarine-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693a11aff62626077e317cad975a8777fdcfa74a0ac6bbac5448af479d6983c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66726 Malicious code in alive-plum-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834822e314795ae08e9efcd07bd32bd9aa24e00e89ea308d76bb26ed6e663a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-amethyst-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0b579aeb2e8fa9917ecde9ee439dd73d7949776104b0f4c93315b640c562b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68295 Malicious code in federal-turquoise-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675cc0636c9f962fcd1c80a388314fc037e2b04f5defcadc89287df14d192d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70103 Malicious code in puny-purple-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48cbf10f58aabd3749f949ad7013330b7d21cbc0451570790c9ada9791b7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68837 Malicious code in inc-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcb835a4cdb793602bffc3af2a71d8f6b49043da39d129943486908c4ecf57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67207 Malicious code in civilian-chocolate-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec1167f5e94b1bfb198b44c75dc95529809fabbdddacd7308ee7a5beb5b6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67833 Malicious code in domestic-coffee-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645139da4c4fcc2e2dd80ca9d466dc3564b03e13717665ef6643d5997535a494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66684 Malicious code in aesthetic-crimson-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c12bb56bace184d324c5207fe72726d18970c5e8af1ad23b73ddf99a75dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71026 Malicious code in sympathetic-rose-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bd7f698af77d5ef537c312bdbb86fd34cc7e3e25071036e954f329904e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66576 Malicious code in above-lime-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd12d86b242fca88d7dc55f5fbbddb72448436fd45a4a8aa5f449c8c2cd471f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...