MAL-2025-69822 Malicious code in partial-rose-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27d0c49db0a7cdcb061529dfb3162ea69b486e060988006b840dff8ff846e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69480 Malicious code in moonmooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a07e15a119c31a9846d824ffe4ad9d996e2b78aaad96a1fee8e0afc4fb557f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70058 Malicious code in prominent-violet-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a069e6e1c9ce2d9071d762bd9859b83c4697f7abc53aed31692f585522ddbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67972 Malicious code in elderly-teal-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424d3222d194fb0a7b004f41672d02bac4918c1164111c504eba9019224f51a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67262 Malicious code in cold-aqua-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30943f3e119c21087e433c9516342cc24d0b7e0c261c95d8a1e1d014a5fe206d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70066 Malicious code in proposed-apricot-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8990d126ce53efa59d01f946e1cae0bcc19e3512db6a55fb3b76288f8b6123e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70754 Malicious code in specific-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e8981ac8d6dfb6a2c43c9cb57d095b077f25272bdda9aab002af736f9f43e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69060 Malicious code in large-azure-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39282620065f1e333f5287bf0f3c7435c32b21ee507f6b70012ee586c8bd029d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-azure-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1f4c9cb920d4083a01c8a45d49963121b1ad809256d25aaec562aa99d5e45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby-gold-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b902e2d84290bd0e4a8f09e8d3de86ef01a9fd22d15f47d4fe0d8fcf5a6b8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71028 Malicious code in systematic-fuchsia-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0857437b7a75d9f699ecc6586ce55e4a43b6e9c43b19d120e9f1abb4a2d0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70724 Malicious code in sore-pink-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7a7f61d94422652526ed97e462bb43d7aadbbc95ec34afb78f18eac8673472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71150 Malicious code in top-azure-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5e29006e02a05904a4113e34ede83fb2ff35963c96164270fc55813e8f3d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68654 Malicious code in healthy-tan-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa311d53a401f8027d4e7651de65399fc740db97240403e75f909d7884e4c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69374 Malicious code in mid-blush-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e5aafe244925ae91d31e7f4293666567fe9cc4c90ba33395620464854b0e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69043 Malicious code in key-bronze-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918362f96b1d4bd3f7de44ad53beb5f397524b25a8ca7603534e6e705049763f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70048 Malicious code in progressive-black-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe39284710694ec5c5188692566b906383dbb5451c29c6aa18f90623a7e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69995 Malicious code in pretty-sapphire-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b70a577e962c0ab5c74fa4976a934bfe27aa0140d60e0deec0de56b1126aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69427 Malicious code in misleading-sapphire-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899c7619ea9b5883fd84fca1ced278b500c76b09afdc33e95cf25d99cca7e48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70158 Malicious code in racial-moccasin-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0ac61e39814ee6f27a08ad69584179f5ab2611a8a29ee34486db64a8378398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...