MAL-2025-69634 Malicious code in northern-cyan-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9f4dc46303416f08d3467d9fb21fbe4feb5366a6c451d19beeadf513c44694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71082 Malicious code in terrible-scarlet-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf022aa89df38edd5da11dde4d7537a96d77f211ab7223241223ea811fe19b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67123 Malicious code in cautious-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb927e3912bedd6129b6e72b1c39e04eee32126566e8274b0822ae83946c7b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70272 Malicious code in related-yellow-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97cc6b7bcbf334684aa1a74bde5fb5fd02cdf2fcde2200107229fad4a30bbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68624 Malicious code in handicapped-amber-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74275bb43e600994eba90a00faacd7ece9a298979a3fbd3d186de95ac52e9b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66575 Malicious code in above-coral-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f958d802d0caf0247d0d428a9e894339711c5af5a790a45d9e9d7a082b14bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68041 Malicious code in energetic-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f416827b5d729f75586bd613e9b43f8a7ff1bf5bca348465ea951cb60913f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67690 Malicious code in deliberate-beige-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c95c0745b9998315e41f8ce760662d6d588fa027611f87d710989d25d970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68068 Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68105 Malicious code in eventual-olive-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a4d5b01a424b4771e5084ef2c8b94776861088c9c804c3282a5ac2aedcb506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68316 Malicious code in fierce-purple-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e5cc50256b998c149693e2bd90761f604b6be555fe4d976e50edf52cd2e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68365 Malicious code in fluffy-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddad31e43e3421d51fe647897902d78cdebb744104f2cc4f9b48628c9b52a006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71510 Malicious code in vulnerable-plum-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8636aa46a14abec32cd056771fdf0e8b7ccf52ddce2d1374613ef1b252862a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68078 Malicious code in essential-coral-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0750ff917e95d976d044ee0850289b332a7449f3d605c39aa56ce1688c885c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66960 Malicious code in big-amber-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6d0edf6126a0426cbdd9428c728cbee561fcc5f789245646a332dcb81c0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68289 Malicious code in favourite-lavender-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4e0bd4971c756f997d18beb8fd7c646fb86168118c96bd05193d16ef70524a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...