MAL-2025-69537 Malicious code in nasty-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ff1ae28c1c73f4ecee2d8cf1d2ce102566f373115bbc7f8ad7ff0ce414aae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71271 Malicious code in uneven-rose-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f28ee7879619b034ebb4cfbd6a10d8a81a66f5fa7e89dcbae3966c2f27d8c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69642 Malicious code in notable-lavender-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8587e820bae58cac07378fd31d0929388c683d313d7fb98efda4a6bb552094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70753 Malicious code in special-yellow-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4806075a97830de22dd5f0815ac9dd71c27c68733d6895ad9937efadbc541aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70264 Malicious code in regulatory-brown-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca63897ef5832930d052239cb586952229c5d76b72d9d47fa72037b87f9baef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68776 Malicious code in ill-indigo-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b30cea900f1631201a6a311183ede185a9365548fd258fb64cdd5147830b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66734 Malicious code in alleged-gold-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0402650951201a0aaf4894790167461efcad02909383f1728e9fad9ee196c864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69377 Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67186 Malicious code in chsiantur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a87760f6c9e18bf4012259382f27f27d5fe26b91e1109ec22792c5cf42bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71154 Malicious code in tory-crimson-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca4922998183fa450915085f19df4aefd583060164bc2a4bc4826ef23fd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71711 Malicious code in yearning-chocolate-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad5e7674544192493434021f9bf63733a637b744f6f4903f5b5a083f51e5381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68758 Malicious code in icy-blush-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126bf7b71a0f90e3e43af14e5486793f0da5b767402256c18b33340b2a5b70a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67678 Malicious code in defiant-peach-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42111608494ce914f66cc762b51cbf246b81e8531db1e35fdd132ac21d59665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66664 Malicious code in adorable-indigo-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbd1c286756a81f697120589d5e557c404ff4f4965c7c924beab5c4a9037a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate-plum-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b28915e31f4fcb635e2ef6cef30a0766df4bf98b71305ec7a3eb29ad00d7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty-sapphire-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684df63822d4f0415e2189bb1898899590db165fc99f4ffd8574f57e8774d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70440 Malicious code in ruling-indigo-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c43c54e6ab3a1138dfc175ca6d2080253632c262c48d6f9c7879a0eaa4d480c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67130 Malicious code in celiaex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0702021f90f2adc3fe5d058bdf82e48ad8cbf5d8e4d160db0d89d4792bbd37a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67402 Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...