MAL-2025-71691 Malicious code in yabbering-moccasin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc84b8289f00d4532ad4f9f4b0ed863483ca90b4839cb799c6f9d0e16db341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69468 Malicious code in molecular-cyan-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887acad8a96536df262fd7f8e14b644c8b7e09db984fa16467361682d8d46e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67516 Malicious code in costly-coral-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7eb17e2e267188c3f85eceebf6012349819dfb3d409ee0f036b54bcbd9c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71326 Malicious code in unlikely-plum-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dde274ec103e829d99e4dfa960631a143380c80c9292594eb8c4ff7f19b862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70753 Malicious code in special-yellow-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4806075a97830de22dd5f0815ac9dd71c27c68733d6895ad9937efadbc541aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67243 Malicious code in cloudy-maroon-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04f9771977b6349dcd3db5cbbee4fd610db7728c8884f62f58da041b940165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67280 Malicious code in colonial-indigo-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36c034c6cad0747287bff3e14665e7df786656d927fea9df764bda091717288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69756 Malicious code in original-amethyst-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39b544048410f058f36b431b65c7f09ddd1082302da253620ef8b177dfd5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70854 Malicious code in stingy-copper-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821ec40a719bf627d271c591bbc0157a49284d5e08b82da3748732e444a913c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70554 Malicious code in shaggy-fuchsia-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76e9d45f3e1d6bc2e67dc231a3f9f60649f6e7d23e5a59673383596832cbdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67733 Malicious code in desirable-moccasin-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b189fa70eccd310cc2970314ea3c67cde21f05fe0244f46239f4d22f283c66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67121 Malicious code in causal-amethyst-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924d08655ff9ac0630367d81367be46434385e6b7d4a69071031fd686da513b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66778 Malicious code in amused-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0faa6b2fc7eefa5085748fa905af2d69a1ea7b5171aa839ffbe6718cd312838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71011 Malicious code in sweet-azure-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af537ca438726f486a4a50281c92a6fa4e5da8f62c107f27a4b5c14c1bd7a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68157 Malicious code in exciting-yellow-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9813c2937eda0b5d30d3d46690163d5ce602f9434ab5402d31b3c55b34a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68396 Malicious code in formidable-red-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64aca1c5f4d6f4b9000cc4868120ee799f2ff28512f8e514d98485b3442179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69002 Malicious code in jealous-green-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63ae02c445bc7cf89c12998264d45dfbc36e4e2405e53f5ac1801e5d8658990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70796 Malicious code in spotless-indigo-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b1017b8efb49df9a8fd6489cb4a37cc8b15873a3b936cd93bc4efbdea7b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68253 Malicious code in fashionable-aquamarine-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91254bc229db6339c558fa5f160f496e4ac09801fc389f05803086215b3fcc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71141 Malicious code in tight-plum-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81384638eab155e8eb446d66d499ce92585f324a6a221d4dcc48a227069d0a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...