MAL-2025-70822 Malicious code in standard-lavender-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bb821481b582ce7e85ec94e08a8ca0bf3b8d703c1815873b6a1d70f8042ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69070 Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67769 Malicious code in dirty-bronze-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8b3672e79c743ef6a768816b5935d376af08ef3ad1646edef80de5df3a3b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69870 Malicious code in persistent-beige-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a801573b48932b8e64c285db902a0b5407607008fec4583c661922b0e33661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67669 Malicious code in defensive-green-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df0324c8bb8eed12214cf5efd1c46850aa70ee1cf7e6b35924804581422169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67195 Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68818 Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70431 Malicious code in rubber-plum-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f2cb293c3e9b155198b19825e766b2baaa70fa6c95e79c1ce1450bfb95c17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f848b2d6ada58a0fc49d9c9a07c5f7cda5d384e040db17689bf8be37a2a77ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-turquoise-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541afebd01471651746bb5347128897b6e119e38f481ac4c3d48b5238526f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70026 Malicious code in probable-orange-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a58f7ce6e2d78437370a76458e64ab26fce3fe05c4ea8cd503991b70da850b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71165 Malicious code in tough-brown-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65eadd0dc03c7cfb53d379280bfc37690748319b29fadb5f944aac41fc8dc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71431 Malicious code in vertical-tan-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891ce3f3cdc86cbc11874359df91f55be147e36783a5e63106eb26827ff876e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70710 Malicious code in sole-apricot-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e43c86c1c4c0c72df8778635468c857f119e12fa5bab6f5aae6151f1d04e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68626 Malicious code in handicapped-apricot-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db44263c50a582bd54af265f0bdaee2aea2de081a7119e74afff4ca5d667a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69800 Malicious code in overwhelming-lime-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a2b2a820eb3357dbe28a474bc68cc5331fb211f6b0a76287b86dbf08c026ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69560 Malicious code in naut11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809d2d5f9fca56b60d196e6b1e05df17f7786a48f4e09465da77ad3444271a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71136 Malicious code in tight-copper-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c4b63883ccb709694df00325e9d5182362c77e2eca8efbc0dd2ddc84e32ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...