MAL-2025-68888 Malicious code in informal-teal-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf377d78327a03fed8ac4a8b863ce320652b8659c96b4e43961785478c15e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71461 Malicious code in visible-rose-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d60e84edb4a90a97bdd911d41109e94e40befa461a3caf7aecf55d799df7144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69600 Malicious code in neighbouring-tomato-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb12089303b6314dbdfe10ada149e0a17d27ec84259aa9ebc7ad9cd54af1c86c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68698 Malicious code in hon-aquamarine-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816224f5eb71454c5f0936757bec00263d0f5d1b9627b9a87d7c65ebe13f7fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71681 Malicious code in xenophobic-teal-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f8d039f067a11023b228ee908aa0a31b610992b5403b55853d2e8b0a4ec094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71732 Malicious code in yodelling-coral-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508578254beb55812a524287bfbd102141dc41488ea6dba0906f99885358f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69419 Malicious code in miserable-plum-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172a73c7b4003e0719f1e716a5ea303e6e87dd3a4925a622a0f7b9ef11b679f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69002 Malicious code in jealous-green-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63ae02c445bc7cf89c12998264d45dfbc36e4e2405e53f5ac1801e5d8658990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68157 Malicious code in exciting-yellow-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9813c2937eda0b5d30d3d46690163d5ce602f9434ab5402d31b3c55b34a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69468 Malicious code in molecular-cyan-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887acad8a96536df262fd7f8e14b644c8b7e09db984fa16467361682d8d46e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71711 Malicious code in yearning-chocolate-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad5e7674544192493434021f9bf63733a637b744f6f4903f5b5a083f51e5381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69756 Malicious code in original-amethyst-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39b544048410f058f36b431b65c7f09ddd1082302da253620ef8b177dfd5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71668 Malicious code in xenial-amber-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c31293da98e074ddc7cfe45b21bbcb5878fc3966d11cde424f97888f4d69f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67335 Malicious code in communist-violet-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f93cbfea10fe0de435e70921b2543fa2bf5da9addad72241f23d173ce2e2d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67121 Malicious code in causal-amethyst-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924d08655ff9ac0630367d81367be46434385e6b7d4a69071031fd686da513b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71011 Malicious code in sweet-azure-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af537ca438726f486a4a50281c92a6fa4e5da8f62c107f27a4b5c14c1bd7a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67243 Malicious code in cloudy-maroon-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04f9771977b6349dcd3db5cbbee4fd610db7728c8884f62f58da041b940165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67280 Malicious code in colonial-indigo-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36c034c6cad0747287bff3e14665e7df786656d927fea9df764bda091717288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70854 Malicious code in stingy-copper-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821ec40a719bf627d271c591bbc0157a49284d5e08b82da3748732e444a913c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68138 Malicious code in exceptional-aqua-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cba2b5128422d1b84ae9d6d861bb01d3f698776a2bf3976966b381c587cb3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...