MAL-2025-67140 Malicious code in changing-fuchsia-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a2bd698cc48c32727b3b8fcbbefc96f831a463b6caa25fe2e186797281471f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind-tomato-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ab5387398377f8fe5b26d3a451a47fa90b026af1b29dea1aae3761a18eb6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68983 Malicious code in irrelevant-coffee-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c260a20a1236963509af69c32ae15248baf1b30e7984eeac4c28d3cf0ee740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67141 Malicious code in changing-moccasin-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95c58e2be6729c40c7efbb5d597f27080d9c8e7007c756dfae8659d904bc128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67678 Malicious code in defiant-peach-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42111608494ce914f66cc762b51cbf246b81e8531db1e35fdd132ac21d59665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71632 Malicious code in worldwide-lime-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988c6060e6518646825217fb5af13171af9a36eca48392d23f7aba7c1219f725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69517 Malicious code in mutual-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f88a81de5855bc0d779515f519c145904c8b959b10b4326141b01eaf1805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67844 Malicious code in double-azure-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e4137acf0eb6de7eae1bfaa6eaf2028de7954aae7bd777e86d4c03170e4ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71474 Malicious code in vital-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245d42d0c0fde6a7dc606068cb1e51970c6450ffb25b89cca7780ac4c4e712d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68597 Malicious code in gross-scarlet-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66ef336dd759a69d1aafcac8ed70ebcb24a480e4214d4ceac52a8efb6157c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68593 Malicious code in grim-silver-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e650abcc427e730c5e75d21895cb036015f9a38717de2fe6cff9719e84e136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71124 Malicious code in thoughtful-moccasin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f6accd6026252175134c0f62b084e3b62f12924f7763063592b649c59823c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70352 Malicious code in residential-magenta-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8a005f29aa7a2413c4e4e147c1cd5f83d1dc6f2c0e99a82ac8171e49c5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67645 Malicious code in decent-chocolate-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67758 Malicious code in digital-tan-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640ca506a09c1b77c7bf980edfa675aa4ac5ac8e777a1f0c66412563d6982fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70678 Malicious code in slow-plum-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45685ac519da98bd076dfbbafd6a4955b4d8be1ffff492c840df1e8259e40cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67527 Malicious code in crazy-beige-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f648c4bb6b80db0adeeed0961f2150d876ec3b3ff39e7f0858912de99284e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70167 Malicious code in rainy-salmon-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a10754935eac97ba8410c82ccc851606191e37ab2d9777cbdefe2ec315ed62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70814 Malicious code in stable-lavender-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe3dbebdf19034ccb5e6d9f079b34e209948046f6434e541e5e58b5b236c4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...