MAL-2025-68256 Malicious code in fast-azure-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55b577e26ac0553e3382f2454fc67c337af92ff08e97041f4b7f3b5bdb92e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69053 Malicious code in kind-violet-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45a9299357bf0f1a96592a661285dbdba348517df5d9dee4e723a316ca17a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69798 Malicious code in overseas-teal-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd73502da3b570b70fa56c2f5130e415c9b06bdbe4397bb19565e192a84aaa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68662 Malicious code in helpless-aqua-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc71ecd3da6cb2f579c17345e18d6561a93e4d762b9494f5bccca8ea0fb08893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69522 Malicious code in naked-azure-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22456ef9a76d8d5f343b60f389696f45a5ead0648cecfc1cd736a559a9bb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70936 Malicious code in sudden-maroon-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38113f09d90bc962e4b2b4496af32ee58f44b7cb5e8341d62819ac52a2d6ad97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-blush-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7980ce48ffd49bb684d6f7fdb930918659a0c76edb972baa5c01fc49b7630c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peaceful-blue-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53eae3e4d0d43fc5ef0c35367a50bdd4aa3debe9f9205a731ba6bb0329a4148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69371 Malicious code in metropolitan-harlequin-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af373b23ec3bc54737c73997ed4e178caa3f7d348adefc2e066539730ea67f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66964 Malicious code in binding-coral-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eef4e24076f018743fc4394e9a9e90605f3e07fe43b723722711f56f14cb3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68232 Malicious code in familiar-plum-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acaebb75ac457787adaab1d94786dd12a0dcb94ccd507aa52cd1fdaa33307626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70665 Malicious code in slim-coral-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbb6450b62db99dd1863a2616d6edb15a2bd5e8e145c503b0e630ea599dfe28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68688 Malicious code in holy-amber-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0396528c165e73477a65a3d3d8f3ef3643c196b3a25a879e90247bd57a9f3953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70994 Malicious code in surprising-pink-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9690d6a1b8e7dce10554f1198ab97e597bb1ce2c30d9403b30d28c2bbc1f02d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71254 Malicious code in underlying-amethyst-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14048e1f37e4654640b531593f1caeaa8ef13f9270568262a1db69ca9935a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68732 Malicious code in human-coral-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae407800d8c6f3324e7594ac8fca90d7b233aaf4d70d0e437b8996ca4767791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70007 Malicious code in primitive-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c1b77f2f2a8a352dee0e5843d55a43942177284d16b3cc2b98612817f80cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67890 Malicious code in due-amaranth-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7523ecdb53a060bcde3e9f3b05b4456e7cf861a6597c26e6c348b345d777da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68828 Malicious code in inappropriate-amaranth-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bc7c241dace5c3ce670b45013716b8465df881b5b0dc5c88e2f07000b769d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...