MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70863 Malicious code in straight-pink-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faac6b1361fef3f7dbc13df386c1f409609729bc4ec04c99543b040ac5fb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71384 Malicious code in usual-bronze-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2bff99d1a585f4814712a6158a4f5c7a1b0330ac64693615a6e5ba5c81404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66715 Malicious code in agricultural-black-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71122f2472a41a2e23826ac83bd59f536a662514a98797eec62aebcf4773c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67123 Malicious code in cautious-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb927e3912bedd6129b6e72b1c39e04eee32126566e8274b0822ae83946c7b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67115 Malicious code in casual-amber-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749c1c107c480f5e02a82359f8690e2022d1abb94b9da4aafae34cd41e77b3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68316 Malicious code in fierce-purple-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e5cc50256b998c149693e2bd90761f604b6be555fe4d976e50edf52cd2e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67851 Malicious code in double-sapphire-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c79e97c70da78e4693d25ab309a27639b45dba0167fc6a60f56695e0309373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67523 Malicious code in courageous-crimson-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419b1e4473b4dd0ec98266db2e812fc976f3214bae44d1aecc92e1fa4ab8e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-amethyst-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fcc62ad7a18c6227b16961d6a4115d7edd8637fc633b33529bec5fcd49bf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in armed-brown-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7aab827817b7301529dc65b2932d1698c9aecfbc964d4051f04929174a373c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cd3636fb3bbfbea120b4b96e14251b65d7f6d8ff91ec0fc0e3215fe4291154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling-teal-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612fd801148ed5818c5a011418140b35015894a1a1726ef58fe74f9622a66856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-ivory-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8dc6f6e4686daa2d21f377ef1a92018323685cdee5286ecf2093b76480dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-tomato-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1280df31ebaf45f4a2ebc83b3ecadaba873cecd55cb99ce517b933ee41356092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...