MAL-2025-71337 Malicious code in unsightly-gold-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b33bc4d79db5cb884bd14ddba220d2046c42655d7c3fedf0d81092c1aeeea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost-indigo-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ef9e45ab44a18d9df480c09e2f4a4e560a3df91f77d7f20988fa4be97855ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68605 Malicious code in growing-olive-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8c664207d9020ca291b543eb46e364486ca2f5556fcb0019a877e60e914b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69524 Malicious code in naked-gold-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d39f17e1f57905ea98cb159960424054786cf96b73dc5586d1c624fcc92adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67912 Malicious code in dynamic-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898cc20dac207be5f5e597c66540510fd4de37910630900b6c2a9491a94a3a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70792 Malicious code in sporting-pink-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe5a25031c4f272bd947aef59da9c71a992b82fbeb4323c1b47020967e4a2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70104 Malicious code in puny-yellow-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47958ce0e75f0836a42722d2a4a958cce61920b0bf8257d7a503ff10d79786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70368 Malicious code in resulting-salmon-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23108e7958ea84d2eb9b1848dbda790f210582600de3a6b028b227f90cb43531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69067 Malicious code in late-maroon-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1952bc3a6b79bbb9d86e49431a8e8938b816a3256f5b9b2ff21f8a63fdcfec8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66771 Malicious code in amused-black-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d2d535eee46bade5c911531bb50fbdf5f05474bba87634b41af4bd2c8bd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67237 Malicious code in closed-lavender-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040259d2266083ef8f612142809c654dadc2265d20e7bac358c6c6ff9b952264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70336 Malicious code in required-chocolate-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11de199fb725cfa12229b8e24315bb84035439be1e175af2bc9f5c121d56415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71753 Malicious code in yucky-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7141bf8adc65b4424fe3783dac59cc35e718e084f8e457abe6630b234b42c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71700 Malicious code in yappy-fuchsia-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae00a9abff69e91b03facb109a5b60c165354dcc3959ccfef8855a99248dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68001 Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective-silver-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c80d2e95f677f8b72e28524775ab983b93b3a9154b143a09c276121be06ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67436 Malicious code in constant-orange-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8826d60228e6f32c5ba801d67c490ff1a586633d094726c624571caf02028a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior-chocolate-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b63396d06e20fd598cecdef9224194216f88742e716712ec4ab2e9927606d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69674 Malicious code in obliged-amaranth-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc98befe8ac2ebe814c48390068360f6c41f6956125697df81d6d75fbf476e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...