MAL-2025-71182 Malicious code in tremendous-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1c94553d2b20f6af994e3a9196c4c4a648575605ed9353efbc2e323e268317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68977 Malicious code in intimate-tomato-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f167a20685872395db398e3e1dbeae1bc9a98b0c62c1230d92667770efaacd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68371 Malicious code in flying-amethyst-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d89eb1dcdbc4851aa1ba44c692c71b6acb04e6cca27b4c886ad5b66d418c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69554 Malicious code in natural-violet-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57948328fcba92e99b28ff4584e01b31b0c9e2d6f42b61364874228171d3c930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71029 Malicious code in systematic-ivory-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b8e260b6e54bde8b8b7db1f6a85512159b40358c29145e90c83155a95d974c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71429 Malicious code in verbal-plum-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b496d1ab241484cba97418c9cc84d80d0a343b2810ee771b907e40463cab3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69649 Malicious code in novel-moccasin-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b27c12fca7b06d3f0dac586cc4b7f3bd3c00a84680ea6ceadaeaf0c52c7b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69829 Malicious code in particular-red-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5575dd5e1c15fbe19dc7886e281352b4acba6ba3309e0e3c5aac4c02d286e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69418 Malicious code in miserable-jade-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bccc27504a2c72acb8535403ed01a002af8d8b10e10a0e19e8c6732ae0b52b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68104 Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67270 Malicious code in cold-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba0c8c0ef31de546b826e9a644184270d18cd0e8d297fb1659928192786480b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67973 Malicious code in eldest-amber-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200608b18e01a83410b49df32c1bc4d510ffff46098bdb42abe9e887a4a6e118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70911 Malicious code in subsequent-chocolate-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8235263945df4e8450eed547dd5c5c9457588f318ba3262f19eacdf9f7456e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70546 Malicious code in severe-lavender-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a28600d212e6aebd7404ed287bf4e9d6b829f9d0806200fa0a347310989478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67741 Malicious code in developed-amethyst-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b1cccc4e10dc3fe415a27aa22285a79ddccb3a1868f2de2b66e2844cb4ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69306 Malicious code in marked-fuchsia-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db60ba6401dce1dcdcc8ee71a4f540a4beed61d9ac0d40150f944d067d986422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69403 Malicious code in minimum-cyan-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee89283559647380a1046505f02e277089fab5ff14451803bc856776f9ae676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69778 Malicious code in outrageous-aquamarine-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f56422e2b3ca015f7771ec66c329b219bc5fd9a506cd3633373154a875b112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68497 Malicious code in gastric-emerald-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1113a67f20681729c53efac197a03c46b808c456961a910e84ec6027a29be054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...