MAL-2025-69723 Malicious code in operational-harlequin-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8190b8f18b5686db934427ce2d89d46cc91f16af18374b0de232f961af7aabf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67686 Malicious code in definite-purple-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870f206af59d7a04bd1467145e1117bee21ecc36c7c589ddbf1e5ca38333c938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67345 Malicious code in compact-tan-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb1318ab14f4cc4798fc18728a5a460623690b36a34a54f02571af3c938f06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71395 Malicious code in valuable-beige-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88fa29e81a004ac372035a46736074172fdf9f00ba098abdafc5704a175d94f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71700 Malicious code in yappy-fuchsia-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae00a9abff69e91b03facb109a5b60c165354dcc3959ccfef8855a99248dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66578 Malicious code in absent-olive-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9417c1e88c7256f10a885f52f971aac439f7269bbb4294fbe5a6c62e8876ff97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67224 Malicious code in clever-crimson-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742ee34854482456da363c21f5eb1d189966fe0757c64e1bbfd29aa7dd7ec8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67126 Malicious code in cautious-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1b206ad012320110f03436837d2dfc620d43d35dd345b2b24cff4c25cda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69522 Malicious code in naked-azure-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22456ef9a76d8d5f343b60f389696f45a5ead0648cecfc1cd736a559a9bb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70104 Malicious code in puny-yellow-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47958ce0e75f0836a42722d2a4a958cce61920b0bf8257d7a503ff10d79786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68665 Malicious code in helpless-scarlet-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812d7155011b8514daeda4270b957e825abca14f14c223454f99611ab2e2331a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68256 Malicious code in fast-azure-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55b577e26ac0553e3382f2454fc67c337af92ff08e97041f4b7f3b5bdb92e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68232 Malicious code in familiar-plum-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acaebb75ac457787adaab1d94786dd12a0dcb94ccd507aa52cd1fdaa33307626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68281 Malicious code in favourable-crimson-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c2655b76e640c09d37b15baa994513a150b41cddea83f2add61904e688bf5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70162 Malicious code in radical-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8367fb776ad7c38eb66685ec4896e99ec3c00e8690bdfe87c1331e9505682586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant-copper-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeee2f32ecc23926a1a2176385ede38896e478e2ce4c5f12ae84ad2c97db437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68636 Malicious code in handsome-magenta-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bb5c59161bea8f6a4f10e4c1bee35389346d3fe3e3cef95a47a60c0f072cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-aqua-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1080c08842338178824d12a0dd1267a9d38ac725da62ac95a1df8145161273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical-moccasin-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98773a78cd4b85e74c3503f37d4182440027f01241391b3c10f8551cf924dce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...