MAL-2025-70723 Malicious code in sore-peach-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1e0c415f1daa5d0dd8fba7bda513defee10c9041a2e36b269bc94b48e6de87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69471 Malicious code in monetary-amethyst-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4007d6cbaa7e43548701b7e128d540ba96d7ab7cd33cccd28a96c4d69fdfef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71043 Malicious code in tart-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb72c3e2404104d11029fdb0d5b89fe92bf18bfbcb3eb0e175f011951616ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70563 Malicious code in shaky-salmon-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289c3d3e1391f9b5a8ceb987759bc6e38535498a47b135b34ddaf63ba3bee2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70486 Malicious code in scrawny-emerald-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bd8b04ba18f17f5ad122e8cca295214aa4a15dc1abf59d456017d57d60ed68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71563 Malicious code in whispering-moccasin-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65bed430a21b9665a25de32202fbc46453d83b82ffdbea1d90d896c0e4285f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66629 Malicious code in acute-bronze-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e254478c454fd14b13f56821a18769184b9289364b23c5e04f12629d3e08fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69740 Malicious code in oral-tan-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2463a8a0771ee5da0fd941671916cc060f9b90b653846fc0854e5404bbde4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-teal-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf27855b8d982d64570e54c2f90e76e0cb63f93110fdd99c4449dc1754f4488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe-gray-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259054ced66bdcdd5ea38fc0eda3866697eeab41654eaaf794f3eecf87f9117d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-lavender-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1e1f103a4c659dfc3629a9f84ec397470f31f3ef3dc985c6b1172a2607b350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-blue-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3150b17eeb9981cc637f4c3b436830d564ba4f2d1e9321e05a290daab7fefaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66713 Malicious code in agreed-emerald-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b0baa120f81f5641fa72eae2b5cce3891e6b035a0645daa57d38736d29047d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69140 Malicious code in liberal-lime-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f021bb4afc62781aff36c021bf4042ecd90372c813854eea755321a8509130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70819 Malicious code in stale-moccasin-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9fe960364bffb413a2710b15beabeabddec4c8e8df4f0eb5a4a19506705fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67373 Malicious code in complex-peach-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f128ef25cf365a2af343225b257116e9c34637f6e4cc5e3ad10f81e67756023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70093 Malicious code in psychological-copper-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b640f418230ee7f5301b942f0ff853426ad88ff0d31c4ac3598b075a17479c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66817 Malicious code in applicable-plum-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac83677b829a48b2eea56dc83c8234539fe8cb2c5de8cc8e6c1f606ec8496f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...