MAL-2025-71265 Malicious code in uneven-azure-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461933f84a4d2495898e76886ea2ec8343a4fd4bab3b9998fa03e1cd94b49d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-scarlet-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48cddcc5d57cb1ed4247d4d5510ade9f51b5d4a66ecb4402c22744991dbb481d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative-aqua-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6756cbcc02a80e8a9b30116f25dd346784ea932efce612d90d2d9856b6d50ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71564 Malicious code in whispering-plum-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22198422df8646ff37721225ff14a0e4e29715971d426dcb934575e2ef6521bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68369 Malicious code in fluttering-tomato-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1716607ab59656a89672f4586ee36cc56939dd82ba9beb0165456cd3e50ee9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71082 Malicious code in terrible-scarlet-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf022aa89df38edd5da11dde4d7537a96d77f211ab7223241223ea811fe19b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68717 Malicious code in hostile-blush-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e940ce232f8fa821b1a3606b2f419a62af50d5d09000b707f8008212eccd3c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68624 Malicious code in handicapped-amber-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74275bb43e600994eba90a00faacd7ece9a298979a3fbd3d186de95ac52e9b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67820 Malicious code in diverse-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc206d8e741a0b930b4da3e3691a926149c6a9771793f682f134a6fd81c8b6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71784 Malicious code in zippy-green-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3e020b7eae784c2807e8f9a4f563cbac998c5878f005132b89ed043b28aac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69882 Malicious code in petite-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f933137ab6d7196f261659bdfd0cf3c4641d58e8d9faec7f895d77db332c74af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69669 Malicious code in objective-coffee-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723a2100c4ffee881ca605634382d1561b909db72ce4f270fbc4c1c6b98dd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68595 Malicious code in grim-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbad8a54e8e2c7291fd59b975fba5b4fe06f00acb3276aa0cd96d3672fea42f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68484 Malicious code in fuzzy-amaranth-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa424bbc31bec947e42bda53311126810e21981828bddcd20b60c1040a988797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70463 Malicious code in satisfactory-scarlet-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfadf2cfc2445e713d1794cdb1c4fd9f7a71717e2ca7d499804e98924b25c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70335 Malicious code in required-azure-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5770ca3e2f6346ea16e82c0218a69932c3fe4d26a7e8597e9f29af33d373e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66934 Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68202 Malicious code in extreme-sapphire-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d05cb2e6c1949cf65fc509b0111cc0ef466de840938798d07c4ba83bf633183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70468 Malicious code in satisfied-rose-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d644e3d58ce9e42c5779266e2bfd7d4a037c943fd841ef2e8c85678c61543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...