MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68138 Malicious code in exceptional-aqua-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cba2b5128422d1b84ae9d6d861bb01d3f698776a2bf3976966b381c587cb3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69264 Malicious code in main-olive-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5658bbe8d9f66c130431ca5a7e8dddc5d4eeb4a5fa48889cf325759b36e6f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69724 Malicious code in opiumoee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449e84d7c04ae3ea4ad4a0a53d4a0753731402b5535db365475096a2a2765e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69118 Malicious code in lesser-turquoise-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975e41ce985e02974fbc00a6671cefe7fcb8972a7b5e75d385613da6ced25311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70802 Malicious code in spotty-red-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ec9b8a9706ae5a56d9ac792e8c28aed69e37d0b15cbcf385d1944a5527fc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71442 Malicious code in vicarious-chocolate-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a833bead0cc4cf135bf30e46c2d0a69c42d2cce9203d138a1abc50fd9471b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67376 Malicious code in complicated-sapphire-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6106800e1040b6d0bd3035d7fdb86b0f2a6839558d8ad8d54925fff71267ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67180 Malicious code in christian-gray-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25467d1a966e081f13043dc2a05d4baf6a81770fb8f190a4eda25f37f22d53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69566 Malicious code in naval-gold-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c25a2b8d868d9b0ce0c1e231ceecbb6691c3d35a95c7e7938779faa479e39ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69398 Malicious code in miniature-lime-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2892d64a298f0de1eddc7fe8f5762c2b0991fbe3cccbfb94c042ec674924d040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69812 Malicious code in parallel-silver-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493017337ae3a06d6a22680f82da7d3dd7fe215967acde0df83fabb5adbd17e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69222 Malicious code in lovely-jade-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2757083b03f8b24b95c963c0474ea5502c3e8bd8b5069df47004a3c882aa989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71490 Malicious code in vocal-plum-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c62073ec70f75b6d76ec5ca212aa636c435049267496cec64ea613dcbadbfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68609 Malicious code in growing-violet-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270b712d55bd8079f4dcedb5f05af8be3fd8e84d60b8108b5e8c54e1ee698b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71688 Malicious code in xingyun69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34cd3f36fca407da1cf325e7afedafaaf12f8a3f888ca9a7bcc9e791076228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69041 Malicious code in key-azure-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b720d4a2e1deb969ad0516605b932efa83748b4c017333e143a7b7e49bf2ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70198 Malicious code in raspy-teal-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b4732bf62b510971302b292caa48e5467dcdfaeeb2ca52e4852aa141395413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70150 Malicious code in quixotic-white-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b8d3a18904e52b57a8acabd65fbcf2b9a39801acf782dddad36a97ae161337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...