MAL-2025-70774 Malicious code in spiritual-scarlet-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc977f87ab9dfa5659ad5788efcb026e0cbc95e29c00b0f6c84044daa40158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69155 Malicious code in likely-purple-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43808c5e7840afc4eb83d4a1c7c54d4a9db9df5ad270d269f90151caec210a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67342 Malicious code in compact-maroon-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909a58b99ce334b90d44a602b9d9f08389a8b8b22443e97914e8ba2ef29a4956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67432 Malicious code in consistent-indigo-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5aa96f872820a8af0cdeea5c4d75f956818cea2a1e69f0715d22c0e90734ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71212 Malicious code in ugly-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffbe80c2bbdaee3433ce0d1594a1035580f0054a998a071a1cea1de7e426824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68237 Malicious code in famous-cyan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8617cf7b6feaa67afe8b5adab20ecb1e5365143509da1518394888b92e894b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66812 Malicious code in apparent-salmon-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c208690ce22f7cf92267112eee5bf1b40d0bb0c5617939a887aa078091a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69038 Malicious code in keen-green-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f218711f1012740b531873630c392ad5712eccf58ad020a22104c4d20b8f844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66809 Malicious code in apparent-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c312a31c8f76fcfdca7982ee4ea8c4c54dd86816c1f44f2651bd27c717d672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67874 Malicious code in drunk-aquamarine-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a1f7004ce24ef63fc53b578b2dde94068b56c086d99403257e1eb93a09bcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70740 Malicious code in spare-white-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06917ed4c161ff8e5709c9225f92fd1d3837cba7985bc5cc23a274c2a0e6858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71092 Malicious code in theoretical-brown-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59bc5a29cb8b1e8b93aa72fc935a4344959cdb3b5b134825850018cb978ca731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68034 Malicious code in encouraging-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9861a19f3795151004d24a4c2a30f26a1788d7634dbb432f744c00dd5b839150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70083 Malicious code in provincial-black-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d2c2e4fe62f1fcc86d213c43f8fcac8b6e5e02e7338212ef1500ce5bb2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67947 Malicious code in eerie-tomato-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06f358f6bb248f9525513d4d0e3aeff924a7f0e5ce46e804fd58865dc3dbda8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66710 Malicious code in agreeable-white-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb629059b91801d526b9fa1b24f0a92cbf1a1c9cd8d545af261caf98a2768820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71125 Malicious code in thoughtful-scarlet-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57d514d4e0618108b1fa25c617582555054e9b39c37942ff52d3dab094abc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68903 Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66660 Malicious code in administrative-coral-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b263a9b4ed0aea9432186687952c453f86cf5c615bb120a6eebaeead0232ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71452 Malicious code in victorious-turquoise-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe9a2aee7f0c1bdaa9b4489ba5e85b487766abd34432328b7062582f15da173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...