MAL-2025-70705 Malicious code in soft-gold-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66140c2b4e5ad775ff5f3e670da4a5a84dd583321c32e65998bbedc70fce1954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69644 Malicious code in notrofil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b08b51ce8885304708b682c4d40f74f63a4bde9af0887d3daaaf4be199363be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69813 Malicious code in parallel-tomato-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dee76d153cdb3635360c8258f7e0d2fd0c3147fdaaa8b9d36ab7799d18169cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69293 Malicious code in manual-lime-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b96ac4c18e4c8d1f8052375b93922ea8222e7aefb1b7bd7047486e686cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in actual-turquoise-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5656eb44aaa094427fcb494a122ef8efcb1557b55a785ccff22de593838a76fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced-orange-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e6003c0888bcd4e1788f38b5c97de46fd66846046e2b0b91130ce9f8e3e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-cyan-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd637f1e0b9776e4858438e6422bdb6f460cd72525436975dc30f2cb413256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge-gray-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0865aed4628cd02306f76af1e109e928e7df969c16ecf5a2726a61b109beea70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous-peach-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ace3721eb5312d70d6f43fe28b6d522d40b52502d4476c6da3e66fee9b957c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicchorus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8460f6b43d86f03464e625947ba79aff3a81809b3372cf750f8ff3cdb833c58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69665 Malicious code in nutritious-teal-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4381f62e535937ab5b6e80dcbe55cae92d385e5fedaa811535a5c72cf90ad959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69794 Malicious code in overall-emerald-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7289c16138569650387935cfde003c3311634ce3d7eceb9e18585e647586a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67777 Malicious code in disabled-lime-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0e547a06e21116469284b82e5f3e3b3b8338e8260cb68e2262c6b97f65227a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68226 Malicious code in familiar-copper-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29ae3b613c82e312d950614229f34aaf4e441a8a760d1869b5167e1c2767722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67046 Malicious code in brave-coral-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f406273f28a62a85ee8d1b40aab451eb79f45b2631d03484a4db231a95a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71107 Malicious code in thin-amber-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0833edff1dc7b446c54e45b19063371e621d8382d3f166333b43a22fe5ed20db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67828 Malicious code in dizzy-aquamarine-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445d8c93165d66f6ddf3c5637fbf91f480a415b6d02da7fc192ef6497bfa2e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71251 Malicious code in underground-ivory-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea78fcd78bd48e1e9b012b01ea5e6c513aed46356748bc262e81e56473bb0534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70265 Malicious code in regulatory-brown-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1c13e5b68f75574ee576b3e7c48d81ec3ce9fa844170b320bc45229f40871b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71437 Malicious code in very-indigo-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff22bb932266d634fb2fe73a2044d7fbd1f090c534653fcd23b59035e776fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...