MAL-2025-70502 Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71700 Malicious code in yappy-fuchsia-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae00a9abff69e91b03facb109a5b60c165354dcc3959ccfef8855a99248dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70007 Malicious code in primitive-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c1b77f2f2a8a352dee0e5843d55a43942177284d16b3cc2b98612817f80cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67647 Malicious code in decent-orange-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1721a79cb22497ce84da1afa9a6bac7ce671172cf01398f9b71cbca5829ed105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66989 Malicious code in blind-amaranth-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698e76686e61628f27e10e2a84158cdf025190b7bd0fe4fcbdfc37c2cd441dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68939 Malicious code in intense-bronze-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bb2b9d5bc275f2075b844ca5ad10998eaac7135026621e3d3b63f521a9be0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68210 Malicious code in fab1anz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c31799e5240746a24d493e24d44f7f09251415ca6079264176855371832384c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70400 Malicious code in rising-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3b203ba58c3cf2d19cd2d2a4a4312da9df02b8c493c22b319319e4a9b5143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67189 Malicious code in chubby-gray-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e9bb5fb61907ef6fbf7a1570c87e18dc26d07c55189767561aaa3507c4ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69573 Malicious code in near-orange-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90a35109ed738f41da92608770c3c65c5b7599867c3634eadc60eab391c14f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68645 Malicious code in head-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1c12b9dd298295e5d5c739cf47660cbdf273a32d7b67ea446bc7c038db65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69522 Malicious code in naked-azure-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22456ef9a76d8d5f343b60f389696f45a5ead0648cecfc1cd736a559a9bb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-amber-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42699aa96c8bd124674e7f5e301b89b22da8a17b151b4f3be42f89b526a2ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70699 Malicious code in smooth-coffee-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97818a6ce079959b9e5dd4b5f4236441c26c671bb5ec0ec26d8f541e2e8e83f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70968 Malicious code in supposed-amber-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98632ed83ad3bf64e2cd6d740d0c845522ba792fdbb5c100bb0f8fdc0dc3059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67345 Malicious code in compact-tan-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb1318ab14f4cc4798fc18728a5a460623690b36a34a54f02571af3c938f06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67126 Malicious code in cautious-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1b206ad012320110f03436837d2dfc620d43d35dd345b2b24cff4c25cda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68338 Malicious code in firm-red-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec8097af94f5ff58f0fee8680de758693057beb96bcb5a6bcea3944c94640ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68232 Malicious code in familiar-plum-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acaebb75ac457787adaab1d94786dd12a0dcb94ccd507aa52cd1fdaa33307626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...