MAL-2025-71295 Malicious code in uniform-orange-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaba48ebdaa1877eb755b7c2232081d09f2e7795cc739c33c8a192073b5fc0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69564 Malicious code in naval-blush-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c6dc2b354f24730c9f709e7094fe8e7deed44d81c5c8a342d5080436617a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70238 Malicious code in reduced-olive-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35530e799c0a200dbfeab8034ae018325b1e72364f641c7cd1e91c1cdc41df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68822 Malicious code in inadequate-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53932b71f797bc22b1bde0044f33a0d4b5393fa5e6f2050c4655af034dad98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70669 Malicious code in slim-turquoise-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ee23f39befc0cdc4eb8d013e10460c3c167bbdedbbd467667c24b6da335ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69936 Malicious code in positive-harlequin-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35625aa421041c9043fc41eece3d59029e31fb0f67e95340bfc1796befe08393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66755 Malicious code in alternative-salmon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ea7a48712e7659e37c8c0fed2970990a212875866f0b3e418cde7fcf18c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70609 Malicious code in shy-crimson-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c72ee236a89fd80832a38ac814cf8e4f8c2a3f4277c7aff3a0af2cc68386a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69275 Malicious code in male-crimson-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f97e3f5ac7b7b86d4e330eba888c0ca68a972443662bbbc54ba00fcb4d4db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70130 Malicious code in quarrelsome-yellow-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2357cfb88308df4dc284ddccc76ab81bef6bf187d78d683acf726c6e34f4357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66984 Malicious code in blank-gray-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4052c1bfce7d299114ecad3210d4be6752fa9885b85999b21c5317f46ba1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71590 Malicious code in wilful-teal-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f5e59f27e3e6268d2e1001bdf3017c3c196cf5eaf367f278ea6dbd5a1223a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69516 Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70857 Malicious code in stormy-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60b667e6b7ef5491c0fedd90407e11fe537c159ec954e52a83d9be246aacf75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71069 Malicious code in temporary-fuchsia-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b632e80fb257f1c2632572b4cdb768e6a8aa79a52e199ea2d55649fdafda0a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70931 Malicious code in successful-violet-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63da92dbeb5135c264e20c205d89ac32b94cbce4580e336db340361d3044a55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71583 Malicious code in wild-blush-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f96f6408249c74bd44d42a657cf719eaebf4400056e9b75f580611b3a8838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71197 Malicious code in troubled-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a969d47b898c2b8d2229ac1602bdf5be9cf774a4ed52a6a00aa7b5121debab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67588 Malicious code in curly-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd3cd059baf8d64562f5f2fbe7b79af39c4969c6269227bf48a5c572de137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69872 Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...