MAL-2025-70480 Malicious code in scientific-amber-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c977ab90c9c3ec7ac8264ad242b76ce5e9a0f4b79ed58ca90402c56a428b2984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71581 Malicious code in widespread-lavender-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715260f40dd4a37fc7d44587cad95e8d27ded3dfbfe3724bb9a6ced2b261a1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68258 Malicious code in fast-emerald-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d96843802bd294c97f2f6ca5f062fdafe0fa3548667deb8c519ae734beb983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71767 Malicious code in zerizt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc850463ae00925739b2b6e905cf9fc3e8c54ac26872e733a10c7058a46d222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66833 Malicious code in architectural-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1ffec13a2a5e1b78d05b89f5ac3da1731a83cd3a6cba3be626a6c5728d4a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66863 Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70366 Malicious code in resulting-copper-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36175b16f341ad83d6506d14fe384d74ed5c1864ebfd4d7761b72c1c3493792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70536 Malicious code in sensitive-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8ad81460f788e0a350c0f4029dfe3a16ea5b01ffb294d21178786d0942a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70272 Malicious code in related-yellow-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97cc6b7bcbf334684aa1a74bde5fb5fd02cdf2fcde2200107229fad4a30bbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67668 Malicious code in defensive-cyan-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8731c0549606a5894f4d376bff280879a46fb0523161cade1fa51fba4e6af76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69515 Malicious code in mutual-cyan-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f928c38665e9791d379efe11a7f034a54b53e632b593da70391fc8dd5c72a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66725 Malicious code in alive-harlequin-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f69e53c7dd84c99ab8c1994c0c6f5b75352b49fa75c583294a1353cea1d8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66715 Malicious code in agricultural-black-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71122f2472a41a2e23826ac83bd59f536a662514a98797eec62aebcf4773c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69196 Malicious code in living-maroon-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2a3a8cc6811fbe10577051365221b17ba07991b9a914c5f2fa68257537e400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68446 Malicious code in frozen-white-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842731e4a5d31da9b582784aff179c2da71becbd8d9924ca85d16c2c2ff59a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70635 Malicious code in simple-tan-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2468877e2823bdb07d8fc7b7030416ebb5a22ff7a404f0a4d44c269f97ac24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in territorial-aquamarine-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c9180136a44bfed529cd164c5f7c3ce41c7d124597b01a2f962393331152d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere-moccasin-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cf7a037fb353742a6a6b908ff0ce74f7007b0e06ce95d36ac1bfbe596d01a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic-sapphire-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6818543d663edafa30979a7a6c25bb834a995313e115ecd2f74004daff96757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...