MAL-2025-69005 Malicious code in jealous-pink-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af975233e1b45f4cc58624b54d559066eecdcc7838f0f1e1cfcd1a77d25eac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68870 Malicious code in individual-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f164af61dc4ba6a5ace4c58a383ad84235ce221a763ebf189f89783d25299d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69841 Malicious code in past-lime-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e2ba882235d2532b00ca64149ff3a63128478bbb91a7e0955e70aaf992635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68056 Malicious code in envious-crimson-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54453608c7c433db63638e16858dd55b12ca0a7644b3b18878d6ada3da93b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69498 Malicious code in muhui0222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5f5037e6dbb1a2c900ebe9e9e64d910f6aaee8a2124e635daf71cb50008a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67925 Malicious code in easy-aquamarine-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6c18c619cd656688d7ad731fb0fa6cc8f706853a45b7275c8b2890e51b6cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous-pink-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25abd71cc35b73d0ab86d548bca05e2316f761dba78235c0a24988decfc71333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful-gold-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2218784cc7075d10081552114bfaff01ecb4722a47dd8182d4e4b8152fbd6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70747 Malicious code in spatial-chocolate-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3867f73fe31ff6ab661ff6fb9a25fa0be690c124f85e167f80844546d5b0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70592 Malicious code in shiny-scarlet-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9451deb22f47196f945a4d8d6f86101f44adf513918be29fbf67c971ed17c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67021 Malicious code in bold-brown-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299a9c72879f97febb2e0e99cfc9672a065dddcdc8bd89c605588b5b75968e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71679 Malicious code in xenophobic-purple-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece29cfe9a6effd409d6c94fed03cc1a96b85ef5952eccc192f87b574e4d004a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70223 Malicious code in realistic-salmon-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6182fbc0961331903bf47a5def3f4057d85647ab5c6343fd745c94d8ff6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71497 Malicious code in voiceless-beige-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d271aaab1f2c710ebe4ab5063401bb9e0db552d40ba4965cee3a5db0311c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69931 Malicious code in popular-purple-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67e31a617872f336638e1b362e6f9b011f927aa8e677f5e30be9e54046a9d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71236 Malicious code in uncertain-ivory-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a35ca34ab638b5e395973e27cb4d739fd7df296e89afa7a2028b730e19294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-rose-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82e59067f7766d27f22c0c14c15b2e4de8c7a8827d08349ede3e733717bd5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arrogant-fuchsia-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2897622e4d93a3c77dce18b0fe97f75f6a3801126fc910715a3aefaafd694cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71353 Malicious code in upset-indigo-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfd230402a7353dc2bed37c90ff25d2275ee7279dda848420d91b8a8d1dc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68589 Malicious code in grieving-apricot-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a7a34f3a22929204072dbb68142858925c962734e7a97f0c5639cd870a9508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...