MAL-2025-69701 Malicious code in official-green-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bd057ebec4d6117c8acb3fa003625c4abef79d72912aa1263306073f1a27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67123 Malicious code in cautious-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb927e3912bedd6129b6e72b1c39e04eee32126566e8274b0822ae83946c7b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70863 Malicious code in straight-pink-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faac6b1361fef3f7dbc13df386c1f409609729bc4ec04c99543b040ac5fb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67523 Malicious code in courageous-crimson-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419b1e4473b4dd0ec98266db2e812fc976f3214bae44d1aecc92e1fa4ab8e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71384 Malicious code in usual-bronze-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2bff99d1a585f4814712a6158a4f5c7a1b0330ac64693615a6e5ba5c81404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69306 Malicious code in marked-fuchsia-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db60ba6401dce1dcdcc8ee71a4f540a4beed61d9ac0d40150f944d067d986422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66716 Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67590 Malicious code in current-coral-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21642c22551faa3ab3edc8f25a15196415770d5f130ed439d876ba545b7717b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67851 Malicious code in double-sapphire-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c79e97c70da78e4693d25ab309a27639b45dba0167fc6a60f56695e0309373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67877 Malicious code in drunk-white-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83abc384663923fe4d2a9e950a0f609c64d9c5df021da149d7146cc99f5be48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69121 Malicious code in level-copper-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29315ddbac3b0b833f90a4e6566275ffd2fe34fac89cb6d49d1c6971a469773d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70414 Malicious code in romantic-emerald-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e486cca7927a40d92f742d71581d78820c2974078854bb93faf6cb5229248295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67272 Malicious code in collective-black-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba28f57509daaef6f5f46f42995d30a516865e558b818eaf4b07c4edcbb4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70315 Malicious code in remarkable-copper-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c3f9d83e5d2d78130d8059de0e25fc272730968b3b8e037bed916038dec3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71281 Malicious code in unfortunate-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2f295d39e2e2caf5747d61b6a9b95c88d1ef7c0d66bd1a173d25f4c314ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67681 Malicious code in definite-azure-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78016ab4b87792e35267607aa3aff485041cadc303aa35b527ceb29e49e3a6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69895 Malicious code in plain-jade-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2d183b5dc033b854d7d1583dafdb63ffc047d6cfab200981ff1eb9989f27e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...