MAL-2025-70814 Malicious code in stable-lavender-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe3dbebdf19034ccb5e6d9f079b34e209948046f6434e541e5e58b5b236c4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69675 Malicious code in obliged-ivory-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33251fd68ab452088d700395191723a979f6b5760058c765725f961d1de587e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71132 Malicious code in thundering-lavender-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b8f6739568d997ab7fcb664537dba186684ad750f8f3ec43afa449b8b69b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67235 Malicious code in closed-blush-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8755ba40f3a77ec7a7853564885b2aabe5396d98bf204b98d30f501debeb60a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71632 Malicious code in worldwide-lime-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988c6060e6518646825217fb5af13171af9a36eca48392d23f7aba7c1219f725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68593 Malicious code in grim-silver-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e650abcc427e730c5e75d21895cb036015f9a38717de2fe6cff9719e84e136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66798 Malicious code in anxious-indigo-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb72d977790c508ef97e8fb512e4661f385874d01ffa0c88039113fcc763522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70002 Malicious code in primary-moccasin-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2d8078129bac5b1fc7bb5454d0bb7327df13a55577e532f93f0c70ff396e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67844 Malicious code in double-azure-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e4137acf0eb6de7eae1bfaa6eaf2028de7954aae7bd777e86d4c03170e4ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67758 Malicious code in digital-tan-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640ca506a09c1b77c7bf980edfa675aa4ac5ac8e777a1f0c66412563d6982fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66812 Malicious code in apparent-salmon-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c208690ce22f7cf92267112eee5bf1b40d0bb0c5617939a887aa078091a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71474 Malicious code in vital-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245d42d0c0fde6a7dc606068cb1e51970c6450ffb25b89cca7780ac4c4e712d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70678 Malicious code in slow-plum-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45685ac519da98bd076dfbbafd6a4955b4d8be1ffff492c840df1e8259e40cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67645 Malicious code in decent-chocolate-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67900 Malicious code in dusty-black-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85613dd75c60a540118983bdeae25c457aeccbf85f9ae9a8e702ff2c22424e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70352 Malicious code in residential-magenta-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8a005f29aa7a2413c4e4e147c1cd5f83d1dc6f2c0e99a82ac8171e49c5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71124 Malicious code in thoughtful-moccasin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f6accd6026252175134c0f62b084e3b62f12924f7763063592b649c59823c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67141 Malicious code in changing-moccasin-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95c58e2be6729c40c7efbb5d597f27080d9c8e7007c756dfae8659d904bc128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69517 Malicious code in mutual-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f88a81de5855bc0d779515f519c145904c8b959b10b4326141b01eaf1805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67527 Malicious code in crazy-beige-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f648c4bb6b80db0adeeed0961f2150d876ec3b3ff39e7f0858912de99284e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...