MAL-2025-70109 Malicious code in purring-coral-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c89e19e997af573efc8424b164ca65ac01c06b0cd0613350d640c0022a31d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70857 Malicious code in stormy-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60b667e6b7ef5491c0fedd90407e11fe537c159ec954e52a83d9be246aacf75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71739 Malicious code in youngest-azure-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d1f11fc255e5b11cd6a8e8101d607e076d97ce9b67c1ee15c524bb867bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67574 Malicious code in cruel-jade-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee4982434e81033dd9fdc0ad9ee2e29cf8150729d9f6b9cbeef2cf32fd11795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69936 Malicious code in positive-harlequin-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35625aa421041c9043fc41eece3d59029e31fb0f67e95340bfc1796befe08393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70130 Malicious code in quarrelsome-yellow-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2357cfb88308df4dc284ddccc76ab81bef6bf187d78d683acf726c6e34f4357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67603 Malicious code in cute-moccasin-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b215114b24cea060a5d43e004890d685bc745ed9ce300037d88d972ede69164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70896 Malicious code in structural-maroon-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f3f80213b2a5d415b6a95a93c166edd18f8ef8afa677448b349648174126ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70238 Malicious code in reduced-olive-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35530e799c0a200dbfeab8034ae018325b1e72364f641c7cd1e91c1cdc41df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70609 Malicious code in shy-crimson-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c72ee236a89fd80832a38ac814cf8e4f8c2a3f4277c7aff3a0af2cc68386a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69866 Malicious code in perfect-scarlet-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ef5d538884a5142d698d907a16cf12aaead038846c4f4fc07b106c341cad89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66572 Malicious code in above-aqua-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63562885ccfb44871ac01f2fd066d79ef8bcde486ebb67e514d806031d6fcd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71295 Malicious code in uniform-orange-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaba48ebdaa1877eb755b7c2232081d09f2e7795cc739c33c8a192073b5fc0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67420 Malicious code in conscious-yellow-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d241907818e89eb964c788fb7007e876ce29f7268d28706e72fe0477d0b5bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71338 Malicious code in unusual-aqua-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd74cb794abd629b986c14fde81fb872c11be080fdb04f591f39956fd4b9a182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68983 Malicious code in irrelevant-coffee-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c260a20a1236963509af69c32ae15248baf1b30e7984eeac4c28d3cf0ee740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71197 Malicious code in troubled-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a969d47b898c2b8d2229ac1602bdf5be9cf774a4ed52a6a00aa7b5121debab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67004 Malicious code in bloody-pink-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ed4003be9e5a6aea885c3e232d10f786af179fc981e8003a601af3f70a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70585 Malicious code in sharp-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8966270c26cd78822b61d396751db9225378a9c778767569a4389cbf7c73ff33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...