MAL-2025-70695 Malicious code in smiling-indigo-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd7920d5200b98c612dac692c4eb88d519884bc64fb436366fa029af0e34be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67195 Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69715 Malicious code in only-aquamarine-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1795dafda0807ea826924644cd2f74f7c9a48f29586d30943ef0c28a353bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71791 Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71718 Malicious code in yeasty-silver-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5939e3dc21df82474de850c73e2c9d337892d03e4f4ebee28007bf1af8c3a000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67102 Malicious code in calm-amaranth-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cd7b441388cdf2f629a286f7aaaa39e770ebc6a590370f010dde29ca9cf705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66838 Malicious code in arrogant-blush-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6820ff06f89187a7e4e95990a18499f94883e3124de48349e861bce3323db21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68883 Malicious code in influential-salmon-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420de980d7bc44a88f0b8266fcddfd0f16a2b277d0fa4f11287b82db291a597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67659 Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71010 Malicious code in sweet-amber-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083301a7d4e1e987d4d78a77ac69cebd9883ff43b3b2d5f79bf8d24ab36a56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71276 Malicious code in unfair-orange-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946c9f03cf05416d7b26062ff3cf16766e095fcebf7ac9d4a2649e74ea52441a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69710 Malicious code in old-peach-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96238dc96f227e1e070f9a42d86ff2abba25b4e9ca0b80e7eb4639f7f8d52bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71665 Malicious code in xenacious-tomato-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf797140d786549263937d29a5791c8078010dc1389c3d0feb019e9764c87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69265 Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70738 Malicious code in spare-indigo-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba99ae7c1422e3987e32a11ccbee5a19f7d32328a3d9d113586ed4606b9b10c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70546 Malicious code in severe-lavender-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a28600d212e6aebd7404ed287bf4e9d6b829f9d0806200fa0a347310989478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68540 Malicious code in gleaming-rose-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a39061d5e88d3e1c5a566cb01df30e42b22a3153072c502db3c3c2ab4c4963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71561 Malicious code in whispering-aqua-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19aaf887e211e6bab96c21bfb9dd9bd5e7e54fbb1b443d3cbf5583ee2da9307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69391 Malicious code in mighty-turquoise-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2539b34cb73167f8a492d043d976f9a9bd3ceecf289c4157da03492de744ae7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...