MAL-2025-70346 Malicious code in resident-turquoise-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe891155642e09a144573d907d878f0966acbc4cc6e48c92cb8f9b9f3227a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71467 Malicious code in visiting-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3ac39b09725eed37963b2278f501e3a9fac0287caf253277b36d66f8134fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-sapphire-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0f9664f27f7cb06ae899154704a7c3e9bc2910086231813fea7354ec0779a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic-white-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64bbab7f84a8eac0467aad50b159cc1d425a8929dfc991e07ced926f437560a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66953 Malicious code in better-purple-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f05fd2a80e7c60ebe230c9cee5cff9cda413096fa0530180354ef768676e96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68201 Malicious code in extreme-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890c91627cc6c652cf395c5a897dc51dc34d7d32aad8e9850826e492bb373793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67793 Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66906 Malicious code in awful-cyan-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707fe3640d276f0bfd5eb224016268d74c346adaf5807c8b085fb1431e0b6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69203 Malicious code in logical-salmon-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaeb249b01cb478f61481085479b8c66e3267133769da4f068a7945b2aec58f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68438 Malicious code in frightened-harlequin-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdfeacf8eca8c835c714d0fac58a5b6db9ecd9d7a85aa0e2779eb2aef05a2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68068 Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71496 Malicious code in voiceless-aquamarine-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8146a25f15975f91067ead3eaa7be6fd2b1cb7a5b9a168db26e17e6e395a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69735 Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71693 Malicious code in yammering-azure-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77be9ffc60626dbce6c46e8da868e991367087ea53ceaa2cbdc0623db3a784d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71060 Malicious code in technical-tomato-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2728d7d6fd73cada4be0e42aa3623f21d9f8b39cd25fee3a39719cf29bd61a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double-harlequin-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fad3e034486cff831ebd2b0569d61cdd72ded5508eecb473715fe30534e44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male-tomato-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd5c4f438a14f782e9e5308c56c35c3cb4e4c3b30fc85d1de80ccf9e28be0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lively-gray-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc4c7dc19fc1cd092969e3a824e20c12f3d31067f221559bc343affcae20d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic-amethyst-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e1bf215489afcbe01883cdc5b76e97511958786c19d415338a54934e8c12153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...