MAL-2025-69039 Malicious code in keen-jade-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47723cc0ed0ed7fbcb54ae27dd08d5d820d18c5b480d0e637fe645b5b342a68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71246 Malicious code in unconscious-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d420ab563d2cae056e32cbff56b7003246fd8131451a8c48ae50db4af0ec9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67431 Malicious code in consistent-black-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598af1f052e46466388dbe7e2cd5881929a9758aad874ac032f2c30f3b7521d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68048 Malicious code in entire-coral-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b14f8dcc9e07124175c8bb276fe72453bd7e91e5ebdba0bf025642cc5e9ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67215 Malicious code in clean-coral-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e3cf14abf3c1519fbd6df29483251c0dd8f3582715751999b0b6be416de04d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67323 Malicious code in commercial-blush-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894d9ebf74fc9ca2676e200a5aed4cf87ff536f42a6fcaa4a07d88cb35bdaffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71100 Malicious code in thick-azure-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee6a515c1cdeaa622ff6d65a926e5420e5fe539b6f876af84930be80aa06f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71792 Malicious code in zonal-white-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47adf7168924e74ee37df6128d2a433ea4dd6ce63f8b3970ac1946fe2f02b8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71305 Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66679 Malicious code in advisory-emerald-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1a85f3a539513126cb7696ba6c1c970d9774e4c6366d656314ad578c5d182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67644 Malicious code in decent-amaranth-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d41f6fb67e22f864c809ff128842576c012e408785ec74791d49cf9e412925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69423 Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68812 Malicious code in impressive-azure-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d8dd8fd94701f7a24dab950e00596667f85388818ad4c75fbcb6a4ca141531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent-azure-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af895f70ab74eedfecca5a093ca44819913ff12989c7818872d1741a1f35948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67725 Malicious code in depressed-lavender-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd69e490ab0caba8638f725426efdf3a6177a6ea9fbf8bb920e73da61aaeca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70900 Malicious code in stupid-white-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30764cbebfbf7e15b8de31dc3afc3171da4ae1d9e3288c4d0e52b2bc79a220c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68285 Malicious code in favourable-olive-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1629bfa5aad124c27f6bc0b8ddeb68f69c3283cda5c0c91f70731cd72f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69242 Malicious code in mackleafdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9463068afe7a7f31af3ffb0f214ac011287dd8a132fa74a64b204eefed6f1426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66873 Malicious code in attractive-violet-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5310dc84651e474da95552a9bce3efb22b3b5131de8404c8bdcc534b9204d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71572 Malicious code in whole-tan-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18218c87186f1c7ae6d21ef685efba2aa168d89ca3bab236cd4fabcaa4e8927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...