MAL-2025-70026 Malicious code in probable-orange-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a58f7ce6e2d78437370a76458e64ab26fce3fe05c4ea8cd503991b70da850b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67701 Malicious code in delicious-amaranth-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f678a35f7899a5000e4c38699729a434ecf46b8595e6b389250e7b2446978a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68835 Malicious code in inappropriate-violet-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c60476c0edbc66181408ba98997d71686533b1a0a9efc28141b67e96856f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70128 Malicious code in quarrelsome-chocolate-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3650bf43c5209267f01d830ea9601eff058cc699fd68d00f4d84c0549c8b8167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70710 Malicious code in sole-apricot-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e43c86c1c4c0c72df8778635468c857f119e12fa5bab6f5aae6151f1d04e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69132 Malicious code in liable-brown-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9fce6b61a6aea31ac791123bba3a5d485f5941d7aa3565219d81cb736c7180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official-pink-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5000e62f06106ab11742d94e64d45a09a2614570a774a4e9ca73c455ac0d1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-apricot-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ed73874c57f97bc2fe6e241407ee819096d4967cb8fea7819493ebad514d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome-scarlet-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58905e8c44e490c1d78a2ad156372e66dda01891ce9e7d0d29a24d050a9d3078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69764 Malicious code in outdoor-amber-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071f333f0d37b6bf2a313cc2a41cbe847a62a33ca509de552a59db3fd3e6defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69560 Malicious code in naut11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809d2d5f9fca56b60d196e6b1e05df17f7786a48f4e09465da77ad3444271a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66590 Malicious code in abstract-lime-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b6011a3d7d6c2368eaaa23714613788b6ffc504671f1cf3887af92b5bfbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67525 Malicious code in crazy-amaranth-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545911492793ed2d6c2a3dc925efe9a434da5e568bbe565ffa3d61d6851a390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68818 Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71165 Malicious code in tough-brown-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65eadd0dc03c7cfb53d379280bfc37690748319b29fadb5f944aac41fc8dc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70334 Malicious code in required-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2982061858556261e614e1b43d33f94fa04b447fe5d9e59e1677dbec2ed6f793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67669 Malicious code in defensive-green-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df0324c8bb8eed12214cf5efd1c46850aa70ee1cf7e6b35924804581422169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...