MAL-2025-69931 Malicious code in popular-purple-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67e31a617872f336638e1b362e6f9b011f927aa8e677f5e30be9e54046a9d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71353 Malicious code in upset-indigo-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfd230402a7353dc2bed37c90ff25d2275ee7279dda848420d91b8a8d1dc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69828 Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71038 Malicious code in tame-chocolate-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1efd451b7d6586b94559ee020d24000712d1d6ad5db07ef43ec82086b8bb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67073 Malicious code in bright-plum-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a28efa351aef74dbb07c7ddf4f5c231b701adb5b7c7d750c5697a70a3953233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery-amber-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b565d931ee9c549c8e11b892de50c279aa329df8c45a0f2d5dfd9d4198f489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69841 Malicious code in past-lime-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e2ba882235d2532b00ca64149ff3a63128478bbb91a7e0955e70aaf992635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67036 Malicious code in bottom-white-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86053435bad461d822944e119a6134dd7a3b29a7c8f7741ce9842e9eee650272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70592 Malicious code in shiny-scarlet-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9451deb22f47196f945a4d8d6f86101f44adf513918be29fbf67c971ed17c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67110 Malicious code in capitalist-aqua-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79a4c0f9e239fbb3b9ad2aac1ae4088bda384279cd4258fc9089d8701ff5893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67672 Malicious code in defensive-purple-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad86837ea4129c2d11fb21af600ef2be7a665093687ed76e93781772a9314e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71249 Malicious code in underground-black-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b22e3d02456649490e4218fc1f205ee57facfd36fe7585f4ed7a5c226677abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71755 Malicious code in yummy-plum-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73aa7a4244483f3e5ac1ee04dc75283883ed1934bae763ee7a7aa64b6afed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71306 Malicious code in united-blush-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9a6095fa00c3e180e7328d85cca782eb474a12ec8c5aa558c8f0f45dbf55e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68545 Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69591 Malicious code in negative-gray-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078412383c8d93120bca3a4dc0acaa725b6a8d55970573c3e9f56b2ac667b781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...