MAL-2025-69734 Malicious code in optimistic-cyan-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337c04fca762a8467ad90d660a8de36858da1694d0e2f4c3ab139d99891f25b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70035 Malicious code in professional-maroon-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e117b039a2c310e36f3d23a90099cc260145f6edcf5abedbd7592566948e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67395 Malicious code in condemned-aqua-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43b075f682aa8cadcfe15854f6c79448acb195e1b67c6d96418cea018d9a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69498 Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67027 Malicious code in bold-purple-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba15fdd23fb80b803a84a52631aca87ee90328550cd65a2c080bb4c4179c2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67151 Malicious code in charming-gray-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e477fa9b0b8142be070db36745801aa9c6519d137a00f924f5c351eab1005a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69886 Malicious code in petite-tomato-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92256dc3156909d031ea8837a0b2eb7df53427375c89c6037d9c504993220e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66961 Malicious code in big-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f7aeae634b33ab25b843441d2741ccc1d88d6494229b03795e213c8c7428b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68499 Malicious code in gastric-moccasin-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f942d8fbf7308e93279ef1a7a10e6eca5810a76ce074acfdfa3c4c6abcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66727 Malicious code in alive-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e7d433927058e89b625011173b651f49b00420c6ab3784c5548eac5ba84b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69291 Malicious code in manual-black-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a394818943d79f41fdc56d4fd7e146087403d867fc1b6fad3e586e386a62848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70939 Malicious code in sudden-violet-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d732500f28025ebe20921c0f11b93514de44a88b227ac9c9e1efbbe891e6dcf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68875 Malicious code in industrial-ivory-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f4091b09dd34c2f660257e6736992d2586737212b3178e8e0419ab6aa3be66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69331 Malicious code in mathematical-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce8b55f5fedffa444a7bc63ac7eb81db4c2edd08cc80ac9d04120c1051e7a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale-tomato-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af5a4395a55228f60b49a519f5cc020a7bb94cc3e7f0e16c90c99f0ceed93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68880 Malicious code in influential-amaranth-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283a537e21c4dfabebcc97a569515ca73f9cda7208a46b8c6d9d820404a8456b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in super-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f644503a1707739baad0f1404d052cafe7ed148d6c6397cea8c1f523104ec3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68163 Malicious code in existing-purple-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6b4be112198f0e21333fcb146b8759831724822f1f94ae72d6fc60283c0d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70439 Malicious code in ruling-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46dcc80ef31cf47c1f96d0ed43757aa11369292da1f79f93e658eae25a82cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty-azure-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa28e6e9f65c1e3b9542198c8bb881f7bc8e191c136fefe0899ff37e91a8f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...