MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69270 Malicious code in major-moccasin-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1a954d0fd8f4232efe19c45e9c24fa5f09d089c3fbae09ffa04c7c00a1ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71024 Malicious code in sympathetic-ivory-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410a155785bb0c8fe3d5b52615db7ac4aa03c24cb097a41a5a0697046c99e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66860 Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68446 Malicious code in frozen-white-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842731e4a5d31da9b582784aff179c2da71becbd8d9924ca85d16c2c2ff59a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68038 Malicious code in endless-turquoise-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff5c109a61e58c5767a2b42c54204bc2bf87bd85f5fb3c8d96cfcd4342d0521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67672 Malicious code in defensive-purple-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad86837ea4129c2d11fb21af600ef2be7a665093687ed76e93781772a9314e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68812 Malicious code in impressive-azure-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d8dd8fd94701f7a24dab950e00596667f85388818ad4c75fbcb6a4ca141531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70223 Malicious code in realistic-salmon-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6182fbc0961331903bf47a5def3f4057d85647ab5c6343fd745c94d8ff6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67440 Malicious code in continental-amaranth-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c50ab873b1dca28b41f83cc97ad3dd1217640227e86f74aa457a391bfb37f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67110 Malicious code in capitalist-aqua-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79a4c0f9e239fbb3b9ad2aac1ae4088bda384279cd4258fc9089d8701ff5893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68545 Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67287 Malicious code in colorful-pink-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0daee748dcbc689f30cae08ab1c8dc7426eeb1bb490394678ce858aa33df1108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66840 Malicious code in arrogant-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b6c767d5417558bc30feaf7299a5b8aa918a1b3974c20fa91c2db7f8c1f794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70457 Malicious code in salty-fuchsia-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e0569c808fa2f1ce018cbecab66160f528228cc813f09fc453e9a66a67479a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69263 Malicious code in main-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973c9bcef0495fed11524b4d8ce2b8c43717c7bab6ef874b81a526bcc5a7ec52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69005 Malicious code in jealous-pink-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af975233e1b45f4cc58624b54d559066eecdcc7838f0f1e1cfcd1a77d25eac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71497 Malicious code in voiceless-beige-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d271aaab1f2c710ebe4ab5063401bb9e0db552d40ba4965cee3a5db0311c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous-magenta-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db0106b2c99d3cc235a0ee8c7ea68fdd4b69f237784dda15181a85f1302a844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66796 Malicious code in anonymous-rose-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d6d0e18cdee45c51e2fcd1e55a045f9e202224d05377f3b2c4c44c725eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...