MAL-2025-71161 Malicious code in total-coffee-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd1c1d6e2fca9efb9b05550bd0f88fbb619cca53db38211f406a3308b24a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68807 Malicious code in impressed-blue-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3aba3302bc2eb936cb3c7ed64313b887259911d9510136bbaaf2eafb8d04c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70203 Malicious code in ratty-coral-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d31823f5c16f933354a3954d875a560f2f383d43fa79fb56ff8a50cf2530696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70786 Malicious code in spontaneous-black-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e25dbdeb337e2d94d8708d59bb7b6778c66e442d0016b47019e6b512d174b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68537 Malicious code in gleaming-coffee-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b43f4c2b5848d86efa5744cf43311440ef501bf026698105f5a270c5f948a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70914 Malicious code in subsequent-red-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a419aed2bbeca6a6c51e2e5bdb123dd5c3230b813e7ff4f8df85e58474ddfdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69644 Malicious code in notrofil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b08b51ce8885304708b682c4d40f74f63a4bde9af0887d3daaaf4be199363be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70483 Malicious code in scientific-moccasin-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872076a757d7c8923ae91ea4f4949f9da46f9bba5301cefebef292b10d60adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69761 Malicious code in other-green-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6425a0a546e34190ed53ee7c8bc9dde39e256833a073c00dc5835e20783e72f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70710 Malicious code in sole-apricot-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e43c86c1c4c0c72df8778635468c857f119e12fa5bab6f5aae6151f1d04e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67364 Malicious code in complete-blush-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aed78f35a70414a461899bc1a1e0d81bd66ad02adac8a6307adb1c2d8c6342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71059 Malicious code in technical-silver-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02d4bde4bce8d10237bd3c6e1c07f575463ad9e3e76d2c475daa33451864730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67777 Malicious code in disabled-lime-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0e547a06e21116469284b82e5f3e3b3b8338e8260cb68e2262c6b97f65227a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70484 Malicious code in scornful-aquamarine-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36e99d51dc1724b07a561b9a7c3855a99554019830b1ebd50713f63709105ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous-green-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63ae02c445bc7cf89c12998264d45dfbc36e4e2405e53f5ac1801e5d8658990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-coral-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d549ad13e181b5c9e4be49b56e282f6223e26ec200e8fc704681876d614dff6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71628 Malicious code in working-tan-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a790547fbf57d2cba2abc3b9829f3dd2bbccd76d9b2e9e31da420146c96481f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69937 Malicious code in positive-lime-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0ab19ff9acee6feeec704fc52542a325333d838ea8a7c4eea1bc3730911ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68364 Malicious code in fluffy-olive-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4d525388cc69ec7f6961a44f3e312fc0831100dacdfd18b89542362af54ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70975 Malicious code in supreme-amethyst-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7445e8253600e93b63205ff1d984f7a3e3275f6e61bf892bc143291c802a363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...