MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant-silver-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a7a279613344f936623f693ddfe265f85e541046659cd10b69e237111159f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70765 Malicious code in spicy-rose-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36b2f8879c9e35102e6927f0666f5cb449516fa714b607c068f964f0062a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66732 Malicious code in alleged-aqua-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd480ea24df9b0bbf1c329bac6ee999198d1a94ed65c126f94d44ad21b2b5af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66907 Malicious code in awful-ivory-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bed77576b80ec02895d81665bd14663ee74036b695975c846f4b62b364b243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71315 Malicious code in unknown-aqua-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea91b32cb38a03d6bad49bb6d639d2bce3f094ef3cb60f58738ecea07a5a7020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69434 Malicious code in missing-orange-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad0f023e663bdb05ec7c31243516140dcab488c44066ca22e81b69d493db54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69674 Malicious code in obliged-amaranth-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc98befe8ac2ebe814c48390068360f6c41f6956125697df81d6d75fbf476e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67787 Malicious code in distant-coral-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa775f2fc9bdcac13e8543a7305228ed4803521eb07029d18b10369c4f5c109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69864 Malicious code in perfect-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416d23f324b0978398afe760b31f554fcd5bdb60a1a3e19cfbee364c83e3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-peach-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c9dd6906e692293eb4921e9ea447f509766d698878811aaaec3f24c47a104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70068 Malicious code in proposed-gold-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8068985fcda1c305f46bbe863a6296ba79dbb09da3d1859e92aa9e1f40f3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69340 Malicious code in meaningful-magenta-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfb8f5b4edb06fc6ced5ae9d3d3f2de1f0a5d3e231f1f31ec3d5f54c37e2c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67793 Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70911 Malicious code in subsequent-chocolate-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8235263945df4e8450eed547dd5c5c9457588f318ba3262f19eacdf9f7456e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68348 Malicious code in fixed-amethyst-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f1bf92c3027d74632b1d1eb659fba82e6c3a8f815d9ee9262eab62a077219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67912 Malicious code in dynamic-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898cc20dac207be5f5e597c66540510fd4de37910630900b6c2a9491a94a3a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71745 Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71621 Malicious code in wooden-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8447e5e3c56fca9d4f014b4556d4f9d12c77f22038738044de77fc3ce1e23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...