MAL-2025-70107 Malicious code in pure-salmon-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69f23996d37bbbda17b7865bbe9e4910c1c1c57c957d4ee9de54f1f1bff4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71662 Malicious code in xenacious-harlequin-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fb50e04607bcbd3966b5b927b82365f2f87c2f22bd1e627c81e0d27545341e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70183 Malicious code in rapid-peach-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05993d1c539cee9e85900d0d276da3519aadf7b3c6b6be19bfd888a0b4062f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70209 Malicious code in raw-maroon-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254e5cfc0d185808744989d6bd880d75e1f8a060635b7bc29df50ec884495e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67618 Malicious code in dangerous-black-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c0ed07a7b7306bd4ca283dd90784ec9114544a0eed7ab202743cf3bbab2f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68782 Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69231 Malicious code in loyal-plum-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65f718b4a25b7db41dd144c43bafaca01faaef0b998274b8a210d5485c6b106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-sapphire-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e2a6138e7dc543d3d60e75715fba2864f2b4997e17120a6a4ea39bfedba57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71116 Malicious code in thirsty-silver-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e740a46d0c73c4ae024708311fa4f0e97d107b8bf6fbae9d047735e58bb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67269 Malicious code in cold-salmon-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a821e608160cb4c5b516391a3963900f8884b5b849cba50002d4ae14a481919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67762 Malicious code in diplomatic-maroon-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395e3433b9c2fe3cdc69ece01952861b7a12a9f97fecb15b97aff2ff2136dcd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69520 Malicious code in mysterious-orange-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b129ef1e207cee0ca2d6915a1df8132eb8309c02f17758f1080dc766e565ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66596 Malicious code in abundant-emerald-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfc002b9f96067997002d3bf313df8983692de21ca53a8743048fae9a30ab24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67490 Malicious code in cooperative-brown-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85ba6dfe1b77e54e75514ee4d12c5f09080c9cac4c7f91ea33f76be9fa3e7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70706 Malicious code in soft-jade-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d760d82d6cf5c00e004c217760aac7e00abd68e29199fff3fc9712d4724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67139 Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70553 Malicious code in shaggy-amethyst-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9f5e6a0b359ea99372ab32a99dbf278597cd3fee23952f57eb6caea52fcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69488 Malicious code in motionless-yellow-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94108fba18e6667c74440fffb0f5ba5dd334ca97bdcbff02fa64eec5bb4818d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71451 Malicious code in victorious-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e12dec832fd2f802215448ed9ae329a228a61f59c2cdb06c6d4b82fea56046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67447 Malicious code in continued-rose-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690de3e6e9710981ef484ea15d1d82dbcfcddb39cd2a166135fd6b304d7dfff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...