MAL-2025-70796 Malicious code in spotless-indigo-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b1017b8efb49df9a8fd6489cb4a37cc8b15873a3b936cd93bc4efbdea7b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67364 Malicious code in complete-blush-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aed78f35a70414a461899bc1a1e0d81bd66ad02adac8a6307adb1c2d8c6342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69526 Malicious code in naked-salmon-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46db56460849df63684360b7fc715cc8baef7aec6d0c6f85808918026e0c6a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70717 Malicious code in sophisticated-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6db623950849062504176fd2565c8a084550ca53e773189c1bd444fa7fe088d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71011 Malicious code in sweet-azure-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af537ca438726f486a4a50281c92a6fa4e5da8f62c107f27a4b5c14c1bd7a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71467 Malicious code in visiting-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3ac39b09725eed37963b2278f501e3a9fac0287caf253277b36d66f8134fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70694 Malicious code in smiling-harlequin-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099b37825ff1655dc43b7ed6c9f56a1fbdee414d74044f6ded670f907f2d0266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67118 Malicious code in casual-coffee-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a7b2bdbe1609b297c3b2001fab719b990a21c786a4cbc1b20e57aff9830a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68939 Malicious code in intense-bronze-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bb2b9d5bc275f2075b844ca5ad10998eaac7135026621e3d3b63f521a9be0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70400 Malicious code in rising-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3b203ba58c3cf2d19cd2d2a4a4312da9df02b8c493c22b319319e4a9b5143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69508 Malicious code in musical-chocolate-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65c929a3fe8b88c590d895f6876eddf37f49085d90731c5dd548fa4024c1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71628 Malicious code in working-tan-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a790547fbf57d2cba2abc3b9829f3dd2bbccd76d9b2e9e31da420146c96481f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69522 Malicious code in naked-azure-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22456ef9a76d8d5f343b60f389696f45a5ead0648cecfc1cd736a559a9bb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70823 Malicious code in standard-magenta-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ec46b7fa77f3f6990dcd4526b605d858f99b96838acebaf60601fc21c082ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69332 Malicious code in maximum-white-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c02c7ac59b593ead2e56fea626acd3c9abdbb47164b3a702aeb4d7ee9fa9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69644 Malicious code in notrofil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b08b51ce8885304708b682c4d40f74f63a4bde9af0887d3daaaf4be199363be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66782 Malicious code in angry-teal-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9dfb806485c035c3d54fb2e1d52dd0eeb29a6659325e1678f9f510a44305fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71681 Malicious code in xenophobic-teal-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f8d039f067a11023b228ee908aa0a31b610992b5403b55853d2e8b0a4ec094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67186 Malicious code in chsiantur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a87760f6c9e18bf4012259382f27f27d5fe26b91e1109ec22792c5cf42bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70936 Malicious code in sudden-maroon-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38113f09d90bc962e4b2b4496af32ee58f44b7cb5e8341d62819ac52a2d6ad97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...