MAL-2025-71329 Malicious code in unnecessary-scarlet-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4730106025f1266dc8d750042ca099737e9af7e23bd1d83b9c84c8ad196c8d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68737 Malicious code in hungry-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568ad991a1aa8eb68da6a2553c8bc9ad0215e373aa4f9e30e3f9c07ea3624f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70157 Malicious code in racial-harlequin-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f85abff959f433016164be10372eed725755d2c8f81621e047988ac09dd24ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71065 Malicious code in technological-lavender-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1666ca9c6f38ce533b9cb5b0eb4646770d7d2bb5718a064c2f56307bbe5a3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68545 Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68815 Malicious code in impressive-red-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89af3078e42d303c4af556441b1c21249b64c9ddeb52da178c785f34536d88e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67366 Malicious code in complete-pink-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfa16c4881b306aeef6b78feed7487a85aa552ca7a64d27571a812ada3a3a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68897 Malicious code in initial-tomato-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9371a6a94c80da6104b4cbc63e4c3c7c8285bbfade217a535b1918a5b6ab36cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67524 Malicious code in courageous-peach-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b82c310b25a4f536745c8e6396513f220f2c3582b3324c0d47b16f7ac4004e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66950 Malicious code in better-azure-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26435e97f9c4cebe02c4d3b7ddd42a5d411a34876499c266fd1aab766b1b56a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70248 Malicious code in redundant-lavender-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657893452dd9ad60bea7f7ab116233f331a1aa4bb05282aafcaf1316178bfd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68401 Malicious code in forthcoming-violet-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a5114f5245158f4de27e939c61bf96712a048d25d332c328cb93b9c4f35b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68386 Malicious code in foolish-turquoise-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd823ca67cc3e73a4631efb98fc7fb2fe1f210360c2a7f24d9394ef0de45b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70348 Malicious code in residential-azure-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa26df1a9eb1611e389e60edf720a3d52d7e6a39d921184b9054fa15ab9242f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69999 Malicious code in primary-green-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c628f0dd3c06d481f70ad0d075c7b928910b99016719bc7109752d6b5952e539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67250 Malicious code in clumsy-maroon-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a74b16c48751dd91ee315fc8ba82366284a4a454ff04e12837ce63102b2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68207 Malicious code in exuberant-lavender-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d3c5dea5a58399e0cd9fc5bf0d97d3d3c8f83d6702c46ff0dc42cf587de595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69557 Malicious code in naughty-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a081f50c8f9f1529a81c2392169bbf4c9dd70dc82eebbdabeb3b11fa61371295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66875 Malicious code in automatic-brown-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488e274056b76233e7f5ae4cb7dd87a2b693e95f881453dc8bf1d2cbac0d3b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68856 Malicious code in increasing-scarlet-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b3738d2bd0684aff7720ce225cda9158168767c1dd93b325f9037d4426b8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...