MAL-2025-69508 Malicious code in musical-chocolate-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65c929a3fe8b88c590d895f6876eddf37f49085d90731c5dd548fa4024c1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71017 Malicious code in swift-yellow-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2df582faa3dab13c6858218586132474c274e3a5425ff14be5b314c9ea0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69222 Malicious code in lovely-jade-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2757083b03f8b24b95c963c0474ea5502c3e8bd8b5069df47004a3c882aa989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70554 Malicious code in shaggy-fuchsia-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76e9d45f3e1d6bc2e67dc231a3f9f60649f6e7d23e5a59673383596832cbdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71691 Malicious code in yabbering-moccasin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc84b8289f00d4532ad4f9f4b0ed863483ca90b4839cb799c6f9d0e16db341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69526 Malicious code in naked-salmon-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46db56460849df63684360b7fc715cc8baef7aec6d0c6f85808918026e0c6a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70264 Malicious code in regulatory-brown-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca63897ef5832930d052239cb586952229c5d76b72d9d47fa72037b87f9baef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67402 Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70479 Malicious code in scattered-peach-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b200e1a6b1f519dc3fc5e11b8a8603d69d5acdb796eb85ca368e28e1a9be895c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70440 Malicious code in ruling-indigo-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c43c54e6ab3a1138dfc175ca6d2080253632c262c48d6f9c7879a0eaa4d480c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68758 Malicious code in icy-blush-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126bf7b71a0f90e3e43af14e5486793f0da5b767402256c18b33340b2a5b70a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71006 Malicious code in suspicious-beige-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031292c38f054ba116691aadd5e45b826fe97ab6510498ec2e38800ab76bc361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70277 Malicious code in relative-white-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac565890812bec9ff5b7fafde2abd2bf845d9707f8f027a36ad5a2d7f73ba407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66734 Malicious code in alleged-gold-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0402650951201a0aaf4894790167461efcad02909383f1728e9fad9ee196c864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67186 Malicious code in chsiantur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a87760f6c9e18bf4012259382f27f27d5fe26b91e1109ec22792c5cf42bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70652 Malicious code in skinny-scarlet-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbcb4e4b148e1fcad03e97ff8122ebd2c294a0d89e7c01cd1707ba0c3eed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70692 Malicious code in smiling-copper-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df720ae901fbecd45ee28b0d2f7c44a9e69074904112538288cb5a03628a882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67130 Malicious code in celiaex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0702021f90f2adc3fe5d058bdf82e48ad8cbf5d8e4d160db0d89d4792bbd37a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68888 Malicious code in informal-teal-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf377d78327a03fed8ac4a8b863ce320652b8659c96b4e43961785478c15e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...