MAL-2025-70585 Malicious code in sharp-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8966270c26cd78822b61d396751db9225378a9c778767569a4389cbf7c73ff33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68668 Malicious code in high-maroon-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ebd30131856196426dc1efef35c046e54d0dc46f860f5525fde2b0713d0c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68030 Malicious code in encouraging-emerald-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26138100e7ba165d9b1a63674836349f51c9a78f9e615103da550fc7ebc9e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68265 Malicious code in fast-sapphire-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15afb2b26b47bc21221d9a950aad20c10461ec796cf8b6e7ae7633ba452d3237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69931 Malicious code in popular-purple-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67e31a617872f336638e1b362e6f9b011f927aa8e677f5e30be9e54046a9d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70848 Malicious code in stiff-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb369be696eca3294e5c7bd646b36bedda460ddf2dfc2a325526001a5debe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70773 Malicious code in spiritual-lime-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c1a7bc12603a05eae6f51d99170667a8b6aea2a48bdc34820f60bc2e03f1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70945 Malicious code in sufficient-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36676a6917899cbcf868109ca22729546c515830ac75ce5eafaafcc1bbc9537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70558 Malicious code in shaky-azure-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a918f66bcceb1101ed929cdd296abace3fe35b97e4b5829265d61318226936a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70039 Malicious code in profitable-magenta-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea1718a0859d2885ebbdfece95aff118ddaa16dfcba31f957c34792fb9fc036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70041 Malicious code in profitable-tomato-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c865667f7aa79c8c5377d38db9281943b1e983daf9e4926ad3d6ce2f9495de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71306 Malicious code in united-blush-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9a6095fa00c3e180e7328d85cca782eb474a12ec8c5aa558c8f0f45dbf55e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70268 Malicious code in regulatory-harlequin-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4968753ad38701ba2dfe12d95e50fa0c65b03487d7b4e6f8539ab31338e596c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67344 Malicious code in compact-tan-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1eaa4a5769b86112d4907fc6d4b8ea0029f28e2fffede09a6107409ac61dda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67864 Malicious code in dreadful-aqua-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02448f120ee0ca9d388a083c5f36a47502dde97577bcccdb293dda50f96944cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69423 Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69591 Malicious code in negative-gray-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078412383c8d93120bca3a4dc0acaa725b6a8d55970573c3e9f56b2ac667b781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67219 Malicious code in clear-crimson-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f57d5836e71984395d838b1da38fb7d3df74ce16584ef7769b10537ec0000f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68812 Malicious code in impressive-azure-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d8dd8fd94701f7a24dab950e00596667f85388818ad4c75fbcb6a4ca141531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71340 Malicious code in unusual-coral-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acade8225a1059f0339a9b5e33795261cb49cdc30f454f3d783fe782bde1f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...