MAL-2025-70223 Malicious code in realistic-salmon-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6182fbc0961331903bf47a5def3f4057d85647ab5c6343fd745c94d8ff6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66833 Malicious code in architectural-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1ffec13a2a5e1b78d05b89f5ac3da1731a83cd3a6cba3be626a6c5728d4a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68581 Malicious code in grateful-turquoise-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5efbb396e985ef15b5bbd794efb9c99aba8264d1cdb6afe57f25d252b32d9201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67654 Malicious code in decisive-yellow-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88b768d7758c0b3bbb3cc65dd11d05e11ad813106ed2b7bad4781fc9a6db745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67078 Malicious code in broad-yellow-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08b76a383ef375cd50953de58c44b6dbc59c5275aee7b4fe163aad27f08c787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked-turquoise-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e8faa84c5534110cdcc93ce98e3bc35ff50e86983ce39391d8f6bff29c3e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-violet-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e396e17e3922ba02210663c27255408b99f97ca7c6c3992bbfd69b3b32ab2c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-yellow-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10ef8cdf60404dfa7dedb84a373b12d044415e0a56802c498d65bfd5a5b0dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-jade-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b724441ee7db3262dae9204969981959d9bc7733b015a87d78597b4574e74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67991 Malicious code in electronic-amber-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22e2e1db8bd222c9a6e0147fc20af4d7973d1f81b233b5ab0c7d33b3452292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69469 Malicious code in molecular-jade-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f5436e2e1ac7530de2199d8e773808e6e697b4c24350916fa155a99451bb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68746 Malicious code in hushed-yellow-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5046b6121bab1999145b9076ee17ff197855f7d1946b41356b1bb5c2e4eba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67976 Malicious code in eldest-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8639f7fd51f2fd32e333c3b7029e562537724633ba673ec09d847fc66c09b662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69090 Malicious code in left-teal-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703508c9f619bee348c268436cc7a6782d6e1fd82a3e3cabdc7f45049bc7130f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68647 Malicious code in head-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1630ce5f871b68f8a07f00de0d731644765a008c85ec02b6c598e561d89827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69680 Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69745 Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67698 Malicious code in delicate-lavender-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ebd5f6b7895626148808abcd74ff4e91239dd64c538a86ed7ccfc04b1decc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...