MAL-2025-70877 Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67164 Malicious code in chemical-blue-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0b420ddba43aca59c44890ec0a20d0f30f2dcff0cdf35f6a0913227a40dd9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68034 Malicious code in encouraging-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9861a19f3795151004d24a4c2a30f26a1788d7634dbb432f744c00dd5b839150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected-tomato-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c818ef8c96f71b5bd5f5e247edb25ca30cbff584daa0107d3a581eb908e924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67973 Malicious code in eldest-amber-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200608b18e01a83410b49df32c1bc4d510ffff46098bdb42abe9e887a4a6e118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67682 Malicious code in definite-coffee-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb01ba1fd92d2f099bfb1548b851710688afbef4669cf71691c438814ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70410 Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69915 Malicious code in poised-emerald-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469b356b3cd49dce05cf21520d33a3f64dff14418a775ed797d6e44d7aaaf747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71164 Malicious code in tough-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e4e82b6ac4237782b24e7e8e1a8e446bab2596f17113c59e31a81d9ee7943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67097 Malicious code in burning-teal-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05965a757c2d1efadc5f66913ed48b5bf91218ee60ac9d5d6d4b89fd169ced63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67014 Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67171 Malicious code in chief-teal-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869320090ff77f6431b14e67389e450a493e328869573fa69884731f5f0e3124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70684 Malicious code in small-magenta-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f5dc848ef34ab27ef85e731483b99788cab7f05272a33ac77ee0c33c1a9db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67694 Malicious code in deliberate-plum-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0977b0be60a202d6807a06128154074339b8b1264fe6db58d63ad56425400d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69875 Malicious code in persistent-white-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9443d1136148155802d5fcdad0fac7678a03c4cca7c360900cd41737b7416bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68713 Malicious code in horrible-coral-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd76c69f6ef92b0cbb6cd4464b0fe19d5af6d69185be829bc0ffeb85ed2a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-chocolate-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea7eb8d7f49b49709a8f8b1ce23027d86e47a00efc4107db02c8fbc24f35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71440 Malicious code in very-salmon-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f978513608076b5481806fe9bcc24bfb5188f4c10dba9b44c175805234f1d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-cyan-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9440806ac65f71d8f4f13d191df38c4d776e0dd578bed3a09d67ac1e60e4adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest-plum-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bd93afa0394e434a29d5e343920bf1708ab345fb5304c470630d834f8d5117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...