MAL-2025-70785 Malicious code in spontaneous-amber-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf092a425f6449b7028bf1ce4c40881a76dbc8619ceec2d13a602a645780df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66972 Malicious code in biological-indigo-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6e1e4274dd6adfa1d5189e5cef993caeeef0a8884a19c11b2d8d14ba8b24a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70171 Malicious code in random-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbb9f2154552be5a8f0ab6a2b2aaa847bd80bdfebe603c986f444e4835b0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69457 Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70746 Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71317 Malicious code in unknown-chocolate-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb54bf6dbeaa93dd04abf3f30e30c145bda62f4256c2dc00909d762468385812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71614 Malicious code in wonderful-apricot-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37331455abec78185d3395a732801e45dfc44e8088b774b5ba8afe1371b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69918 Malicious code in polite-amber-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb50cb1a15dd90fcb90dc3bac7530e6b8b2e9dc409d48fb85bbd08b675ecdaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66764 Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69463 Malicious code in modest-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5dce31c2e34c15682e326e0dbc982d7cfab618ac1847be297962ef8f08b6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70809 Malicious code in squealing-cyan-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3363b64e1891ec306ce92975a2fc4c55c5894c7c938834c0c40ce0fe64fce47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70880 Malicious code in strict-pink-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ad0614a731a49217e438755be383bf6646bcfd03d610c40b9ae189f48e89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71501 Malicious code in voluminous-jade-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc56092245fc81ed78d1a20e8465a893126b38992874501ae53bcbb1cfb2852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67555 Malicious code in crooked-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc13f36b4814694e66b21e2c5081a97fd69395c9fa373ea750bb96432c2968d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-turquoise-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda0837e1717c893d01c072d3a5deb3f4b10a76bbc4cd6e0e049a1c0b4116d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid-harlequin-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2115edcfb9cfe7b022f939bdfe978a7c4d76d774b25ceca9948fbecc9995974e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate-olive-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1685a2b91e71eb22f4e1d2776b1b294924d99f8c8c7d3241996f248144b7285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing-chocolate-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c82b115c360a1f7de43ad1ce5cd3ccdeeac6934c7982fd563be72885ad5ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...