MAL-2025-68544 Malicious code in global-harlequin-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fe6a7743feeb13dfdc8001ce18599bd9fe27237be4b904d0ddaaaae130dbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70706 Malicious code in soft-jade-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d760d82d6cf5c00e004c217760aac7e00abd68e29199fff3fc9712d4724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69524 Malicious code in naked-gold-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d39f17e1f57905ea98cb159960424054786cf96b73dc5586d1c624fcc92adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70368 Malicious code in resulting-salmon-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23108e7958ea84d2eb9b1848dbda790f210582600de3a6b028b227f90cb43531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68862 Malicious code in indicia1628 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce43959cf5abed9e14f4642e48e04e60bef95a21fb8100e7c26ca361dc7c6c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding-black-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcc3ca43c858495b85383c6c61e30af845e68736d499d4c81ca95620234a761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked-fuchsia-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2674798ae8d454c04ca54600a82ddb297b30bb147d68d80fe5e480516d5638c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70722 Malicious code in sore-lime-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c06268a8beae1efe9ba8bd2e59cf4950320241f1b004453fb1d90d07cec7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69570 Malicious code in near-amber-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837b59624f12396356b94faf512dbacde076b3e0cd28c0bff0277c597c9b8f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71519 Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66771 Malicious code in amused-black-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d2d535eee46bade5c911531bb50fbdf5f05474bba87634b41af4bd2c8bd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69735 Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67436 Malicious code in constant-orange-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8826d60228e6f32c5ba801d67c490ff1a586633d094726c624571caf02028a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70792 Malicious code in sporting-pink-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe5a25031c4f272bd947aef59da9c71a992b82fbeb4323c1b47020967e4a2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69067 Malicious code in late-maroon-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1952bc3a6b79bbb9d86e49431a8e8938b816a3256f5b9b2ff21f8a63fdcfec8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70104 Malicious code in puny-yellow-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47958ce0e75f0836a42722d2a4a958cce61920b0bf8257d7a503ff10d79786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68605 Malicious code in growing-olive-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8c664207d9020ca291b543eb46e364486ca2f5556fcb0019a877e60e914b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67442 Malicious code in continental-coral-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7e5bed4cc7668cafdbc2747838c8bc41a82ce8eabff2b96853a7a6585e5efa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69674 Malicious code in obliged-amaranth-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc98befe8ac2ebe814c48390068360f6c41f6956125697df81d6d75fbf476e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...