MAL-2025-71163 Malicious code in total-salmon-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f969826bf80d2124a3bff71ea3d11354491b83db8af2ca918098327d2bbeceb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69585 Malicious code in necessary-plum-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b65026b202ba5839af990c323c7512f8ca01c7fc1d8e37414295f4d3edef7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69541 Malicious code in national-ivory-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eff4ef83b4290c4356973a63576e0cebad16f5579003925698482b6d354f904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66983 Malicious code in blank-black-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ded53f3d08be208e7079dc12e344a53231b46672ec35d5c80c584e8ef1c484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68003 Malicious code in eligible-peach-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e767570f9898b52442a8e4d3cd107f3e359dfe570b9c7f006e3aafc420f9438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67372 Malicious code in complex-jade-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815a719b585b622b13ca83a1818128b59319277cbb85f5dbc1326fde0604a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71606 Malicious code in wispy-green-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19975d8f0a4cfe353cce3eb88060e7cb2f5da670f7f632fba225a21187ae8170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70156 Malicious code in racial-harlequin-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36f45ae10da48331ac0f9b4c05293d2cac5959c595c4fe7e469402741c8029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69784 Malicious code in outrageous-red-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab72e53d125e5a0c8bd798eb40ae7eef406aafa6d6bcf99822dbfc471539deab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67092 Malicious code in burning-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632f867a7ac504ac32684c53046fd6d1a8e77928d78692a7855aa99fb556696d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70840 Malicious code in steep-coffee-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd5d5ebd8bedda2450ed83990ada971f06b2e4a8d099491b89093ed032a7d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70006 Malicious code in primitive-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4dfe87855174c088a2ec87c7aed327e66b191959562392664b638e573101948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69841 Malicious code in past-lime-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e2ba882235d2532b00ca64149ff3a63128478bbb91a7e0955e70aaf992635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66963 Malicious code in big-moccasin-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0327b44b65149ce34c1053a52bc8438d9395b973fc584f3e01086bbe4d4d7a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71137 Malicious code in tight-gold-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f289503f74889a0d2faf63f930f651466bdf73520ee48c8c01dbda93cdb0d64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68999 Malicious code in jayo555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b4d31f2440a85660a47ae8569b7f3f2c6e74c717c84b12b1996be7223b2137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69901 Malicious code in planned-orange-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b0b3a8340e35bbf9fe0eed06b78ffc8672f99e9f4bb680d762b35468298608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68526 Malicious code in given-aqua-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fdf20206722798caf1568c47e9bb222f45356aab9e739fe6baa55129e69a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-takokak12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e625538170883ba50244bdac95fe372cabeb22edb0ef4157e1b58335634f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tek16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a064d874259b6c205cd77bfe1da55cb5b7d5e87394c69d8200f64a784086931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...