MAL-2025-70677 Malicious code in slow-indigo-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc74d55e9ccd54083d19b6078ceeded471473dabf15d48cf97e2cdb309d7afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71546 Malicious code in welcome-white-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa42b5c9aaa5af0f4fc2a89efb7c94bf0552b379f81d660b6a2672eaab8de035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69206 Malicious code in long-chocolate-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15aa5297ca5131f550b695fb3064ca96f51fd43ebcbdbf0770eb02678f7d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71067 Malicious code in technological-purple-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a691814793a85a196c7005d397d918f85cfcf80b305ea6b84dd582d6eed09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66790 Malicious code in annoyed-turquoise-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f95a023f0a4a82930a9878f491e7e6909ebef1b929991ab2d2c46b68580bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68836 Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69697 Malicious code in odd-purple-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9576687b775650353a733f0c4e8d0e5b605fff5da0450ce790d771926906a0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70571 Malicious code in shared-amaranth-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44039863490fcc255a016201af932e60a5996475bbad7c06d051879f8384c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67689 Malicious code in definite-scarlet-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7039ac17ee7f98def7b4eeaa09fca7d3fab671a48f3060243e26e0f5995cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70561 Malicious code in shaky-peach-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed6600dfad4b72bf1f773191eb0e3cfb1afaee5dd8006a5bc39310c4575ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70747 Malicious code in spatial-chocolate-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3867f73fe31ff6ab661ff6fb9a25fa0be690c124f85e167f80844546d5b0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67168 Malicious code in chief-azure-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5221d5b501b6be1958cc751bab026a9c4e7cbc844867d99f7f6a47f833de9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67676 Malicious code in defiant-coral-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6730a9a518989a00efef7cc6939e47deed3b2b31b7a5d1ddbb1ac93c2ec57e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70174 Malicious code in random-maroon-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fd662117256b66fa69595a36e7a7fc6cf2c530fd399260816a5052c27df5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71426 Malicious code in veli5631 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc4d84a3ddffebaf5dc6e3cfbff6f981c17461ec8b6322f306033c2c9a0a471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67161 Malicious code in cheerful-silver-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf81a320d096980fce7b0665f3f0acfe82233c10b969d390b8a1289f82539a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69271 Malicious code in major-red-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eb2bda60ae750343511264b364428d01e75c687fc4ddf562524f6e3bc8f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68849 Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69065 Malicious code in late-bronze-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d191e0a8defd26626f374529537907cca149eecf65cef3897547bb7fffc7cfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...