MAL-2025-71395 Malicious code in valuable-beige-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88fa29e81a004ac372035a46736074172fdf9f00ba098abdafc5704a175d94f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67938 Malicious code in economic-teal-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b297d94c842fc2e97ed3e4b38222ec988b622520bb713d2af558e8c90d792d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67290 Malicious code in colossal-blue-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba283d6d87d931e7bd5188f8511c52182824eb285244ec3fa84c488d1fb7742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70162 Malicious code in radical-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8367fb776ad7c38eb66685ec4896e99ec3c00e8690bdfe87c1331e9505682586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68872 Malicious code in individual-violet-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2816f0bdeb74107dd05e8dc1bbcdabcad59e94b3bdebefa8441d415e46f0329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66688 Malicious code in aesthetic-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1719c0afb6f9683434f5f9bf17ee5ba0cd20d4ba4420ae18a18800195861d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68645 Malicious code in head-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1c12b9dd298295e5d5c739cf47660cbdf273a32d7b67ea446bc7c038db65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71155 Malicious code in tory-gray-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377fbd27d08702c79b0d1a1cdc40f97e99b2119553e5c69039ea258acb3e568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70474 Malicious code in scary-chocolate-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a0077188d7dd2efb9e58974b5089176217481a1abb05baffa279e5dde89ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66577 Malicious code in absent-gray-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36306cd52e91030f33b057688d85c17690c6059605b360d7f49ad1d87f049d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69798 Malicious code in overseas-teal-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd73502da3b570b70fa56c2f5130e415c9b06bdbe4397bb19565e192a84aaa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67189 Malicious code in chubby-gray-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e9bb5fb61907ef6fbf7a1570c87e18dc26d07c55189767561aaa3507c4ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71800 Malicious code in zygomorphic-salmon-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d7014dbd4f90503bdb9bf33af112ed58f93c141ef6638cc21197ca59cc042a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68688 Malicious code in holy-amber-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0396528c165e73477a65a3d3d8f3ef3643c196b3a25a879e90247bd57a9f3953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68636 Malicious code in handsome-magenta-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bb5c59161bea8f6a4f10e4c1bee35389346d3fe3e3cef95a47a60c0f072cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68608 Malicious code in growing-red-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00a9ca656d7584a2583298f4625312fd2a3ed939e9f10ba24efbbc414365db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68338 Malicious code in firm-red-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec8097af94f5ff58f0fee8680de758693057beb96bcb5a6bcea3944c94640ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66989 Malicious code in blind-amaranth-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698e76686e61628f27e10e2a84158cdf025190b7bd0fe4fcbdfc37c2cd441dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68210 Malicious code in fab1anz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c31799e5240746a24d493e24d44f7f09251415ca6079264176855371832384c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68256 Malicious code in fast-azure-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55b577e26ac0553e3382f2454fc67c337af92ff08e97041f4b7f3b5bdb92e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...