MAL-2025-71628 Malicious code in working-tan-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a790547fbf57d2cba2abc3b9829f3dd2bbccd76d9b2e9e31da420146c96481f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69508 Malicious code in musical-chocolate-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65c929a3fe8b88c590d895f6876eddf37f49085d90731c5dd548fa4024c1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70474 Malicious code in scary-chocolate-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a0077188d7dd2efb9e58974b5089176217481a1abb05baffa279e5dde89ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66577 Malicious code in absent-gray-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36306cd52e91030f33b057688d85c17690c6059605b360d7f49ad1d87f049d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70692 Malicious code in smiling-copper-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df720ae901fbecd45ee28b0d2f7c44a9e69074904112538288cb5a03628a882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66782 Malicious code in angry-teal-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9dfb806485c035c3d54fb2e1d52dd0eeb29a6659325e1678f9f510a44305fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69522 Malicious code in naked-azure-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22456ef9a76d8d5f343b60f389696f45a5ead0648cecfc1cd736a559a9bb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69332 Malicious code in maximum-white-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c02c7ac59b593ead2e56fea626acd3c9abdbb47164b3a702aeb4d7ee9fa9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70975 Malicious code in supreme-amethyst-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7445e8253600e93b63205ff1d984f7a3e3275f6e61bf892bc143291c802a363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68807 Malicious code in impressed-blue-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3aba3302bc2eb936cb3c7ed64313b887259911d9510136bbaaf2eafb8d04c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67046 Malicious code in brave-coral-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f406273f28a62a85ee8d1b40aab451eb79f45b2631d03484a4db231a95a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68708 Malicious code in horizontal-copper-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc611d0158804ffbd74e50241dae09b0029cfe3e362787c5950163ae43176c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70502 Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69794 Malicious code in overall-emerald-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7289c16138569650387935cfde003c3311634ce3d7eceb9e18585e647586a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70400 Malicious code in rising-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3b203ba58c3cf2d19cd2d2a4a4312da9df02b8c493c22b319319e4a9b5143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71800 Malicious code in zygomorphic-salmon-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d7014dbd4f90503bdb9bf33af112ed58f93c141ef6638cc21197ca59cc042a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71141 Malicious code in tight-plum-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81384638eab155e8eb446d66d499ce92585f324a6a221d4dcc48a227069d0a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69644 Malicious code in notrofil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b08b51ce8885304708b682c4d40f74f63a4bde9af0887d3daaaf4be199363be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68187 Malicious code in extended-maroon-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4139b5078c4bdd3da110e2a6eed8fe3ac6d63206cc95b396e90a16f22d222c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...