MAL-2025-70315 Malicious code in remarkable-copper-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c3f9d83e5d2d78130d8059de0e25fc272730968b3b8e037bed916038dec3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66960 Malicious code in big-amber-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6d0edf6126a0426cbdd9428c728cbee561fcc5f789245646a332dcb81c0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68650 Malicious code in healthy-copper-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a27bda73ac41d9a5a074a7eaecda04fa99e348444c37daf1862818d1fe4364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68595 Malicious code in grim-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbad8a54e8e2c7291fd59b975fba5b4fe06f00acb3276aa0cd96d3672fea42f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70056 Malicious code in prominent-moccasin-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed58e694e074fad1631040ad2bbdb3885a9d18dcaafde0e6f1baaa4405e4da7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69763 Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69891 Malicious code in physical-sapphire-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad77ed563c99d336f3278f134c27480c3512faf2127fc6bf8556ee20e3bbb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70407 Malicious code in roasted-tomato-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e177509a34221db84e2de957e265c63eecdf467fbd4afefea2d4ad30bf2659af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68763 Malicious code in identical-apricot-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a06cd7093fb4e7948ede8ddca84a403808c0c537e6272c69f13d5641d0746d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70019 Malicious code in prior-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9d691386da07ae5e78ca6a01edeb6a837a1ea790d4948b4fc32103b12e7088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70292 Malicious code in reliable-purple-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6646b22c5e66eeeb9121ff5987fffa05836d1b8784f79ea3bed543e9744ba250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68127 Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-red-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eb2bda60ae750343511264b364428d01e75c687fc4ddf562524f6e3bc8f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside-blush-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb585e2534df279668c244fa648dab02c569261c227ae04ac2de1c83c302b6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective-jade-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935388bf76407cf0d80ef3d871f449c4874b63ffb4434da3ae03a9231cd20d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth-beige-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0169fe4d449096f70bd8ae55dc1621873bbae21d5d502e9fd8c384d5284373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast-blue-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd5a98244bd01e0110ac5d444cfa88caeae953b583507a8f056ad210fdf7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed-beige-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17023d19174226235698afc1748019f9ff972ec12a5ddc25893dcd6a04dfebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...