MAL-2025-69508 Malicious code in musical-chocolate-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65c929a3fe8b88c590d895f6876eddf37f49085d90731c5dd548fa4024c1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70554 Malicious code in shaggy-fuchsia-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76e9d45f3e1d6bc2e67dc231a3f9f60649f6e7d23e5a59673383596832cbdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68442 Malicious code in frozen-emerald-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed622eb1956b7a12516064298152d3c43f808f89a8c99d3e7b392d522df0e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70652 Malicious code in skinny-scarlet-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbcb4e4b148e1fcad03e97ff8122ebd2c294a0d89e7c01cd1707ba0c3eed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69468 Malicious code in molecular-cyan-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887acad8a96536df262fd7f8e14b644c8b7e09db984fa16467361682d8d46e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70440 Malicious code in ruling-indigo-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c43c54e6ab3a1138dfc175ca6d2080253632c262c48d6f9c7879a0eaa4d480c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67402 Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69419 Malicious code in miserable-plum-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172a73c7b4003e0719f1e716a5ea303e6e87dd3a4925a622a0f7b9ef11b679f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71711 Malicious code in yearning-chocolate-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad5e7674544192493434021f9bf63733a637b744f6f4903f5b5a083f51e5381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68888 Malicious code in informal-teal-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf377d78327a03fed8ac4a8b863ce320652b8659c96b4e43961785478c15e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67058 Malicious code in brief-blush-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095d55d4b3344ebf673875304db54a02e15c22ac8ec1997be78a8e5a0bb3a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69600 Malicious code in neighbouring-tomato-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb12089303b6314dbdfe10ada149e0a17d27ec84259aa9ebc7ad9cd54af1c86c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68168 Malicious code in expected-silver-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445a257feac6823453ea3c2e51be3484a514bd08161ff1c59b22e83a4e4c1397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66778 Malicious code in amused-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0faa6b2fc7eefa5085748fa905af2d69a1ea7b5171aa839ffbe6718cd312838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69583 Malicious code in necessary-aquamarine-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf5b29defddf5bdf1041f26b17ecd0e5f5308ab9d0abcfefc00f001fe8fbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68157 Malicious code in exciting-yellow-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9813c2937eda0b5d30d3d46690163d5ce602f9434ab5402d31b3c55b34a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68138 Malicious code in exceptional-aqua-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cba2b5128422d1b84ae9d6d861bb01d3f698776a2bf3976966b381c587cb3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70883 Malicious code in striking-blush-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82967994aa1f8eb88ef89ad632693f33aad080c8f57ad34d7caef522866db24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69756 Malicious code in original-amethyst-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39b544048410f058f36b431b65c7f09ddd1082302da253620ef8b177dfd5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67818 Malicious code in diverse-moccasin-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258b58eb83b01d28361a8af657761e6a47ec6397316155c34bf1067016012c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...