MAL-2025-70294 Malicious code in reliable-tan-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f564a8500cf19eb18dbeec15075ca8db697da1dcac0bdb934905befe483f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69447 Malicious code in moaning-sapphire-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89e87d76e1beddeed28a699d5c5b1e9fc13b906f96f71dc3cb3a42b898718e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68301 Malicious code in fellow-white-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e386cf8e3c8d8d23fec4917cf88cd4d7ddc20fa30cac669a0b0c4c1409adcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67246 Malicious code in clumsy-blue-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2192a3413946d209a773e6fce679107c715214ce9c78e822a2b24abc3a806d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69136 Malicious code in liable-rose-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79f5add4fbbb81f0fac67bdc4123b3a85a0501852b8807b0f9018bd0f896e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70192 Malicious code in raspy-coffee-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474096b32aa3c1aedeea59447b0e1b3919008eef97e74dfd4815e30e5e594f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69108 Malicious code in legitimate-crimson-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e25c58eca5f74cb2ae8d108780cc99d510b1fb1d36c9bcc64d3aea0638dd6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67839 Malicious code in dominant-fuchsia-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66784b63dc03fd36b548946481748a2b043e092f2330fa295bd7553b3f5b2b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70635 Malicious code in simple-tan-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2468877e2823bdb07d8fc7b7030416ebb5a22ff7a404f0a4d44c269f97ac24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69233 Malicious code in ltd-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72133c33248fbc70005c559d2fa8a0257a643438ea65a2bf47e4ca8209579d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68466 Malicious code in fundamental-fuchsia-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02c4030a41987f0c271889f59f6e6f65fcf6e8f9489dc9bcfc1385a63513f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68504 Malicious code in generous-fuchsia-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cff985bfc558dcae248a99dbbd919ecf8abd42ba3d711acbbb11078dc244a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68483 Malicious code in future-teal-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b326b647334f84af5e3ed88b612469105b442e51e45ca8a5d8f93047851a7506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67126 Malicious code in cautious-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1b206ad012320110f03436837d2dfc620d43d35dd345b2b24cff4c25cda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69993 Malicious code in pretty-moccasin-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce515512d0715a335eff1fad4116d7ddb18cae66f468d7d36b5643527ef2150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68076 Malicious code in essential-azure-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dc7741f52f84c2afbbc1e73e367189a4d0ba7f2259373dffa7fffb5183e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71383 Malicious code in useless-turquoise-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4f2f9f8cc7ac3b9160ed208bedb0818a866ca78ca4b22df75a491ae5fb7c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71237 Malicious code in uncertain-sapphire-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f295e8dede1a300c83597847ee5f13851fe2e9ad941c5187fa925677f2de5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70489 Malicious code in screeching-magenta-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263fba1149ca81bdc73d21c5ed6de8faae129a72f5e2644e827ea620540bea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66796 Malicious code in anonymous-rose-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d6d0e18cdee45c51e2fcd1e55a045f9e202224d05377f3b2c4c44c725eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...