MAL-2025-71354 Malicious code in upset-magenta-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd465043101730d099d86c31167441fe11423687e0042e3218237f6f57d79bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68883 Malicious code in influential-salmon-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420de980d7bc44a88f0b8266fcddfd0f16a2b277d0fa4f11287b82db291a597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66848 Malicious code in artistic-moccasin-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd4cfc833d45b2517fccd239f63bfbe643b03f1acff664e11356c1fcefe369b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66719 Malicious code in alert-gray-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a256918cb2181a2827aa7100afb8b91e32727fae19bdfb877eaedd8d87b8eaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70190 Malicious code in raspy-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef129651446b88b9b77a46df5ca19d2ae7fbeccc32edd865b74f41626e7edf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71584 Malicious code in wild-fuchsia-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def211c66d852174eefd2de3b24a6f80b5b721a45e9dbfc0eb0e5dd01af6c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69762 Malicious code in other-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896b513c2cb00510aac6d963fc128765f95563c6d1b31fe30ae44e653cee2fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66586 Malicious code in absolute-tomato-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc917474b6278dddeff82077e8c62305ed769295750730698a727714569c614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68056 Malicious code in envious-crimson-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54453608c7c433db63638e16858dd55b12ca0a7644b3b18878d6ada3da93b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71534 Malicious code in weekly-azure-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0b60931fc57cf290f8f19903a45daa28d07e9589eccd4bc8394320ad986ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70497 Malicious code in secret-amethyst-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c8de8eca33dcc775bada0f3715b073561aca260396acaa394f93be6386fdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70794 Malicious code in spotless-fuchsia-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fa327a7424308a606a7d79efafc8a0f289e57753c684461b121252eb829379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68104 Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68783 Malicious code in illegal-silver-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b544b2b20b0860cd4a305b941f4b8631675f5e947f73b8a191d41cec5127b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67498 Malicious code in corporate-sapphire-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ec4b4db9224762149fceb07bc18ce16445721c65af4bd38c48bff1602e98b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66890 Malicious code in average-magenta-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9e6650658a0be1840a7a67228ae568df9da6f02cfea9aba4fd9eb65e1b5f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70616 Malicious code in silent-coffee-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ff3223a62a54a89e678df6f46dd92fccd39ae7d1d69ff9ee5a79efccccd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70327 Malicious code in representative-crimson-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d89cd3cfbb5376aa8091140e6c592392eceb6d841b76826f1d7a000e0d4d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68870 Malicious code in individual-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f164af61dc4ba6a5ace4c58a383ad84235ce221a763ebf189f89783d25299d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...