MAL-2025-70572 Malicious code in shared-chocolate-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f63ec33e4ff5bb8c1808b2e220c91a5d78c70ed8de16834cf769bb3ca2ba4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68986 Malicious code in isolated-bronze-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6235956f79263662ff129bf606e13aa3be29e48587b62990b39121fd5ecceba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69602 Malicious code in net-amaranth-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67618 Malicious code in dangerous-black-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c0ed07a7b7306bd4ca283dd90784ec9114544a0eed7ab202743cf3bbab2f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68701 Malicious code in hon-olive-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a4078fd8c75c241a22ce02514b11d1a0ac4d11871e7f15c7e5dacc6fa8d33f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic-maroon-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9077fb613d6f456010d252bfdd2baf4ca67dc6e5dd24f902d1845a142c5d7307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-teal-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035f9e0506da9d5b161711552318e4deebf8e951ced1189e9880ce4006b30343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69251 Malicious code in mad-white-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39d868a57c2fbdb55e161a2b5b1c898979009a06a341429536bf82f7e02173c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70347 Malicious code in resident-yellow-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff8c0117020f7e954bf8a61e491e651236e577857f748ed72e8ef66867073a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71062 Malicious code in technological-gold-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145a79b328c66987ae84ddc2804d7e49501a8a21ecf91b8a29dcd64c86f55f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68132 Malicious code in excalibarx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5432f48f86ed6741ee63abe7aec152cc2be52fb010f7339e0e8bd5ef3021f711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70905 Malicious code in subjective-gray-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29ad4c0f2fed8c0b27e454a2418502a040bd4e51ec8085fc827ab760480a32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68798 Malicious code in imperial-orange-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743f3ca96257188850168c051bf1db1488201b22c5c9547e942c34aa6520111e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69123 Malicious code in level-sapphire-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60edc243937646681faa70ffce2fc76d2b55de51cf4d0beb4bf24586a67f9650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67932 Malicious code in economic-blush-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c136b75355a828f2c5cebd7e064c53de7f25c0f3cffdc33e4ff9ade4ebf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69109 Malicious code in legitimate-maroon-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40046addc25801c286d4b245da48b7b614ecb63ca044b0d8f6c4638df5cbc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69867 Malicious code in perfect-turquoise-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54af203856ccfef821830dfff5d983f48dfba299f62d5c9b06a980ca3c1f20f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69254 Malicious code in magnetic-chocolate-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4d7c57f2144853be7baf855961c310832138026af252cae348511df953ba95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70577 Malicious code in sharp-amethyst-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bc1c1485aa1b6284c291fa195ee6b09c29aa0024582ea46f3a162ed8587665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70323 Malicious code in renewed-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14710c3ebaf6a17c6ff7881fe33b4c167e029a49b2bd73db8112103863c5721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...