MAL-2025-71508 Malicious code in vulnerable-cyan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde09e4f2658c23d35c555d91b777541f2c6a963bc2d9ba3d496c6d004c5924f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68094 Malicious code in ethnic-azure-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b25115d5357dc55c34bf8c5ac54f738b5febb46f29e6a706694565faad7b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70495 Malicious code in secondary-tomato-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0917210095ffc5c7a3f3afc4f4ca3a895adbbf212de97db28fa3f9a8840470e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69402 Malicious code in minimum-brown-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a2feba3308a85679b1758272562f71b9b0ab20774786b0b2f6b8b44da766e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67382 Malicious code in compulsory-peach-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d7fa32ccacedc188b20b1845c9a223fbca632aab397e19e83210d64eb2a10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67756 Malicious code in digital-moccasin-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6ad3e2215164b2dd272f366ad08508a1407c7a87baa6c9f84dcb3c7d5cbc04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70678 Malicious code in slow-plum-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45685ac519da98bd076dfbbafd6a4955b4d8be1ffff492c840df1e8259e40cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71476 Malicious code in vitreous-amber-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564a5f5b31ee732008963b6f231852436b5ab720412d97b636396f481f2b1853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71138 Malicious code in tight-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b667714801dbd50a93162fdcc91eb405474a4a7dcded20178ceb63c415a896e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71550 Malicious code in western-azure-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c566e7c2fc66013bef54176f1fca933930917c7d211b0199d53b586d18a03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71229 Malicious code in unaware-cyan-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8824ecc86c3c4a7399dcf22bfea653ce9a9cda29f4b5a9bba3e674da742606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70966 Malicious code in supporting-sapphire-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d43f3f3fb0d892fb17d9c1d2b876a2fa0bf69452857935624d8a2727b8b100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67863 Malicious code in dramatic-violet-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e151ee70e9b3b8046b990adc8ed81183208175aed7ea2542793180232017b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive-black-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe39284710694ec5c5188692566b906383dbb5451c29c6aa18f90623a7e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69590 Malicious code in negative-copper-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a86b366a95b8e1e74d1f4d75b580ee078211f5594315c90e39fc25725aeb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66812 Malicious code in apparent-salmon-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c208690ce22f7cf92267112eee5bf1b40d0bb0c5617939a887aa078091a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66973 Malicious code in bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd05784c67e182c17c4bb6a475616f685504c8974efb8ceb0edebd8af264fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67813 Malicious code in disturbing-maroon-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d588550aca143f1bf55c3a526a316280d586cf0df174b571f9626d546804c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69549 Malicious code in natural-ivory-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d3a96c0f8e2bf9a3c032b2644c04aa55e31ac0438a42419aef0370e4c5246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-chocolate-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d47e9c91fe338cda2a43a7620bbab83213ce473069986aee025e487cd3033c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...