MAL-2025-71060 Malicious code in technical-tomato-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2728d7d6fd73cada4be0e42aa3623f21d9f8b39cd25fee3a39719cf29bd61a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71693 Malicious code in yammering-azure-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77be9ffc60626dbce6c46e8da868e991367087ea53ceaa2cbdc0623db3a784d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71496 Malicious code in voiceless-aquamarine-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8146a25f15975f91067ead3eaa7be6fd2b1cb7a5b9a168db26e17e6e395a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69341 Malicious code in meaningful-scarlet-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d58150bac0eef99eae5c555fa4aa40f71b7b928f41d90eb12f1b3d3a9f13fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68438 Malicious code in frightened-harlequin-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdfeacf8eca8c835c714d0fac58a5b6db9ecd9d7a85aa0e2779eb2aef05a2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68068 Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70114 Malicious code in puzzled-chocolate-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ddcb9303f775978e20d9c4c9d166aea34a201e7c397d54045edef64b0d2bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67793 Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68201 Malicious code in extreme-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890c91627cc6c652cf395c5a897dc51dc34d7d32aad8e9850826e492bb373793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66953 Malicious code in better-purple-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f05fd2a80e7c60ebe230c9cee5cff9cda413096fa0530180354ef768676e96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66906 Malicious code in awful-cyan-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707fe3640d276f0bfd5eb224016268d74c346adaf5807c8b085fb1431e0b6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70346 Malicious code in resident-turquoise-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe891155642e09a144573d907d878f0966acbc4cc6e48c92cb8f9b9f3227a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69203 Malicious code in logical-salmon-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaeb249b01cb478f61481085479b8c66e3267133769da4f068a7945b2aec58f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67789 Malicious code in distant-harlequin-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5f3b65d9d6a6aefcd43092572d27b4f6adcd7c6acc611301b6273a0b4bb898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69735 Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering-moccasin-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65bed430a21b9665a25de32202fbc46453d83b82ffdbea1d90d896c0e4285f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-jade-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb414a397d4e983d8b94a560ba15581a53e3a678babcf905dec91b369813c117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-crimson-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e44713ae9028c1c614bc0be670a9821af15234eb187046dde60d420deca9a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double-harlequin-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fad3e034486cff831ebd2b0569d61cdd72ded5508eecb473715fe30534e44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...