MAL-2025-71546 Malicious code in welcome-white-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa42b5c9aaa5af0f4fc2a89efb7c94bf0552b379f81d660b6a2672eaab8de035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68849 Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69066 Malicious code in late-lavender-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69697 Malicious code in odd-purple-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9576687b775650353a733f0c4e8d0e5b605fff5da0450ce790d771926906a0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70174 Malicious code in random-maroon-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fd662117256b66fa69595a36e7a7fc6cf2c530fd399260816a5052c27df5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71067 Malicious code in technological-purple-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a691814793a85a196c7005d397d918f85cfcf80b305ea6b84dd582d6eed09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70472 Malicious code in scared-white-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b511093396a478d5cf489a22a5e39f842233e67ab11c0dc82f93d832dcecd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70677 Malicious code in slow-indigo-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc74d55e9ccd54083d19b6078ceeded471473dabf15d48cf97e2cdb309d7afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69206 Malicious code in long-chocolate-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15aa5297ca5131f550b695fb3064ca96f51fd43ebcbdbf0770eb02678f7d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69065 Malicious code in late-bronze-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d191e0a8defd26626f374529537907cca149eecf65cef3897547bb7fffc7cfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66811 Malicious code in apparent-red-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4e48689350ed839a7be44b24dd5990a0c44640fba72fb621de7d01f98d19b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67935 Malicious code in economic-fuchsia-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f720be8428b79df093102f82d7d0a100e90f4e14f329b9b4aa61b2ca4700f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70937 Malicious code in sudden-teal-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f03e0dafa2d3a8cbaa9dc92059aaf53c4217ae2229cecbfb301dd106b8bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66775 Malicious code in amused-gray-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a4bdcc59360288ca4609014c90b928ee075c1ab06e4daaf9ff377c2e1166a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70747 Malicious code in spatial-chocolate-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3867f73fe31ff6ab661ff6fb9a25fa0be690c124f85e167f80844546d5b0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70571 Malicious code in shared-amaranth-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44039863490fcc255a016201af932e60a5996475bbad7c06d051879f8384c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70487 Malicious code in screeching-amaranth-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc43f7d71cb632ed8a75fa1641de61f6f3058563e64f2b03aa668425cc37b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69315 Malicious code in marvellous-blue-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad129a96f36d6dd1b459f9e2f9f7a64fa1a9c5436300936786a9f61233c2219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67689 Malicious code in definite-scarlet-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7039ac17ee7f98def7b4eeaa09fca7d3fab671a48f3060243e26e0f5995cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...