MAL-2025-71408 Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67995 Malicious code in electronic-white-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64bbab7f84a8eac0467aad50b159cc1d425a8929dfc991e07ced926f437560a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71778 Malicious code in zesty-gray-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eae6d36a89a09ca09387838d7e4f30ec40ee4d4a5bf02fcabad6a79f9528bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67774 Malicious code in disabled-azure-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9b688875b4c9acae2cbc6767ef65a7cb30911bb9d740de8fb51c7dca0efea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67218 Malicious code in clear-amethyst-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb4ce55da3da3afd5d9d868d43e2f72599d0c773087acd1ea171a4873667467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71531 Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71351 Malicious code in upper-harlequin-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4cee288100818251aa89a1f7863a70a4a1aee749de4862c29c60607e969805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67108 Malicious code in capable-tan-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d860e833ca394aeb9e14b4db0ab0b492bf12fdf6770bf82c3ac8fe02d27d914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71578 Malicious code in widespread-cyan-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf659feaa5ea0101d3da8e2f6ceb6f38ba84998f01a60eec5e5305421f801c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69452 Malicious code in mobile-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff78b3de8a92f8ea5a05ce91db4b9cf64b73603a239011682f515685736c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68179 Malicious code in experimental-peach-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d178b33c830f8d4c6efaf63d3847dd8805a3b52eb4eae4dab49c6aa2e47a00c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71756 Malicious code in yummy-tan-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5185cabb96f550e73a8c0a89645acad905fcd5f859edc4aa0652051859c7fc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69574 Malicious code in near-rose-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc42bb732ab33de9de4e60010ed2f863080e2ae022367345e2dfec5b0e438742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71210 Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69722 Malicious code in operational-gray-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fb1b6aef8c89983f27b6c0f5469e88d6727aedb8124f92e22351e0edd8973a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70147 Malicious code in quixotic-maroon-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcfdde605e5eceb76d816c525168a3a47f9034d6b204f43ae17f9e87d93c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70919 Malicious code in subtle-salmon-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab8a18937d3c40d6a3d5385156c3cbce776feb9393fc6ed42cca8ae44c89835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67765 Malicious code in direct-rose-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eabef9e4528b0703f8da8a80686dd829da3c1a345d6483a15f39c5264831d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71413 Malicious code in varying-black-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2009a82de0281b69dd2bca9ca9457922a5fcbc565ed744175db5a280c703cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71787 Malicious code in zonal-blush-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5f64167bee9a32d3fff70092b8f5587f68709f03d1ef6a4eace69e31d706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...