MAL-2025-69057 Malicious code in known-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d18e75a9683d78429e348578752801551565b317e89e33709163ce0970ff074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69403 Malicious code in minimum-cyan-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee89283559647380a1046505f02e277089fab5ff14451803bc856776f9ae676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68371 Malicious code in flying-amethyst-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d89eb1dcdbc4851aa1ba44c692c71b6acb04e6cca27b4c886ad5b66d418c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70911 Malicious code in subsequent-chocolate-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8235263945df4e8450eed547dd5c5c9457588f318ba3262f19eacdf9f7456e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69026 Malicious code in junior-aquamarine-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5c25fbe848577565d1c230f54001690b5746be07642850110c0e731f8f807c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67270 Malicious code in cold-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba0c8c0ef31de546b826e9a644184270d18cd0e8d297fb1659928192786480b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67932 Malicious code in economic-blush-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c136b75355a828f2c5cebd7e064c53de7f25c0f3cffdc33e4ff9ade4ebf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68891 Malicious code in inherent-emerald-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce06e0c3b4fa5d06f0957fd74cbfe5dd7c0b20b0fd70ee4bdb91586241030fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69418 Malicious code in miserable-jade-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bccc27504a2c72acb8535403ed01a002af8d8b10e10a0e19e8c6732ae0b52b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68737 Malicious code in hungry-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568ad991a1aa8eb68da6a2553c8bc9ad0215e373aa4f9e30e3f9c07ea3624f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71182 Malicious code in tremendous-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1c94553d2b20f6af994e3a9196c4c4a648575605ed9353efbc2e323e268317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69210 Malicious code in long-yellow-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4380fdc0c59b0e6ec9eed42a7fa12eb2228be72f34ac94de3e169d650af7df05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69971 Malicious code in preferred-brown-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8535d9a5cabc2038667a723f22807654c370f2c1b0b70b7fce54dbc945c68f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70327 Malicious code in representative-crimson-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d89cd3cfbb5376aa8091140e6c592392eceb6d841b76826f1d7a000e0d4d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67915 Malicious code in dynamic-yellow-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4055fac674252ef66aaa2cb4e3071f680b71ec319399189b03232781322d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68864 Malicious code in indirect-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db24658869bffa4aca5f30e0c966494b08ba4606ecca9938b1d10b785a953393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69760 Malicious code in orthodox-harlequin-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617c0cc8f5560d2e454db2da4afe9e190cb3417ed4137df1ebd91c8d601c5d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69601 Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68977 Malicious code in intimate-tomato-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f167a20685872395db398e3e1dbeae1bc9a98b0c62c1230d92667770efaacd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...