MAL-2025-70869 Malicious code in strange-turquoise-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efccd9cc26c1c59aec3842cb453f94a074ecf8697af5eefcd3d37a0062acb402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71736 Malicious code in yodelling-scarlet-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386224ece11d1f49485404fef7619030ef0da3f93a71eee5a0b9d2ac21b39a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71739 Malicious code in youngest-azure-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d1f11fc255e5b11cd6a8e8101d607e076d97ce9b67c1ee15c524bb867bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69819 Malicious code in parliamentary-green-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29936a485d34d73872a7532d9f1be19c895616ae7926c9ff91f63961670fee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71589 Malicious code in wilful-gray-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147898f1426214cd81d9b6a860619d476d6b506afa9cbd24ced16ec055b3ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68545 Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70257 Malicious code in registered-beige-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807a307b323b28236f1e04d5a92d8ca00fe65c41cd31a53af3cb400d90b819fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68955 Malicious code in interim-blush-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d486806c5927decb9c67b25199876be373a69e4a86905ddf6937eb420957ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69047 Malicious code in kimyoonhyeok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f409f0948b05f83e888b8fe267cfe72a62d4f880b05b893dc08281f16aca6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71755 Malicious code in yummy-plum-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73aa7a4244483f3e5ac1ee04dc75283883ed1934bae763ee7a7aa64b6afed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69841 Malicious code in past-lime-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e2ba882235d2532b00ca64149ff3a63128478bbb91a7e0955e70aaf992635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70002 Malicious code in primary-moccasin-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2d8078129bac5b1fc7bb5454d0bb7327df13a55577e532f93f0c70ff396e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69432 Malicious code in missing-lavender-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770fba350a2504de5f74450305cf5fd5c8513cd6e3dc741cab3effa3164431c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68036 Malicious code in endless-blue-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855ec46d32ec3b98e4ceccfdeeaa05fe4fce0ac347aa7b29a0824983dcf1b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-ivory-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f79a8255cdb893ba9afe4e0949e0f566faefe33e5ecc382432dc52df8f7cd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual-aqua-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b85c9d497b8d6ccea223bccd2a402de540a6cc8c9ed3784b0293b5d817aaeb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel-jade-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee4982434e81033dd9fdc0ad9ee2e29cf8150729d9f6b9cbeef2cf32fd11795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70160 Malicious code in radical-gray-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffa2c14f9d3d6661af4107f81c2efd9f50f7c9585ad02aaafaf99e808ec35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70434 Malicious code in rude-brown-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474b2e2f1329ddf5df1564ddd561454e5c86fff96a87098c4dffc880ecef285d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70138 Malicious code in quickest-purple-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d899bce0438bd2931cafc52505ffdef936c0dce2fb2598bb6fb7f74ab92c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...