MAL-2025-70701 Malicious code in social-red-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc441864099719c1b972e7e1c5054dd2a02c9dcd24fd1541d91741cf907efc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67051 Malicious code in brave-pink-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8c32a0fc57a8434a7c6bbbc20a0baf620522460e32a7d1cb2b6c935de2cc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67858 Malicious code in drab-plum-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910464ea5be1cc6fab5885f48dfcf14c48c763d2728798b807ff2c3e2d9b6180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69408 Malicious code in ministerial-orange-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3a8efb19c5c76f8a5aa0fd91d7d80e7c45b4d3e7ac93106b607801efc4154f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69031 Malicious code in kanborasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f47bee1abbbaccaf40bc4a1f476f9631d2c350b759c831ed202be0f6857557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-yellow-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc87d1eb47540de41f0cc177dda8238a93a7f3eec74a8264a9b883f77642e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67052 Malicious code in breakable-pink-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9f3eff7cfdf25fce455185d5b3ce95318dd41e8d299f0108847a1d97abf1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69576 Malicious code in nearby-amber-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24920925b62870689934f00932754a929f1c04386f728ac392843318bd6eb8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68059 Malicious code in envious-tomato-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020d7d775f5a616c9004b03d2b538e77c7c20b191d02105b3c28af959c6102e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69387 Malicious code in mighty-green-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8428e0eb5ec3f0b1e0ce7fb51d1f022d2dd096584b82bb022a25555d5d60cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71408 Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67541 Malicious code in criminal-green-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510938070d9a14f3458d5c6caa6e4acac517749dd78d028281014e3977ade2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67663 Malicious code in defeated-ivory-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc535268cdcebd2aaf9c796aa0fed3710a6068fceba41d0965bd66cc52998250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67206 Malicious code in civilian-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0902ce3981d4280a57000cf5222fbf3cb73197d87c3221baed691af0ccc3cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66783 Malicious code in annoyed-cyan-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab45f746cb633eefebe146b8517370ab3372659347ea5e6205571f12952e447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68345 Malicious code in fit-olive-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d49f5f4d4558f3788ce82a2e896cd1e2e84abf89af33792e5faff81af79c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67059 Malicious code in brief-bronze-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556577ff2fa6488cbaed42bd13ccf406ceae7fd8ee8bb96292d3d307ca748668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68291 Malicious code in federal-emerald-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989c426157388d414bcb8531979c6f2189a027119c6c3179c58e297c1cdc2168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68911 Malicious code in inquisitive-harlequin-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7877230c18f5c2a5f2d160cb45b37c1c75227d05e9590c9fce88dbae4d925bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested-yellow-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe4c85028d67bc884a414511c71d576588853c81295bc7508acec70d97400e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...