MAL-2025-71063 Malicious code in technological-indigo-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb78f0108ada26eaceae362f2033e05431ef451c652e721858accd30f29f4174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69657 Malicious code in numerous-salmon-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ebc2051a089470d941675cc098f600f2154f5df6fb9f62e94e006df0791268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70669 Malicious code in slim-turquoise-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ee23f39befc0cdc4eb8d013e10460c3c167bbdedbbd467667c24b6da335ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67074 Malicious code in brilliant-red-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b99bca911f9c10da4efe6ef0feccd31ff9514dc19d2225f3aa1c92dc95ed125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69018 Malicious code in joyous-beige-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2d478e3e13ffa60c1e296d83741c9cebf2dd3d0f46d3bf40905df7a99d164b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67091 Malicious code in bunneby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5820cfd0dccdb0254edffb9a5e8189cf207068c5def25bf81d048eeae5b8a5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69571 Malicious code in near-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7806b961690c9e6b6b22ae42eac72a5786468af855437e658e90f58e433d7d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67813 Malicious code in disturbing-maroon-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d588550aca143f1bf55c3a526a316280d586cf0df174b571f9626d546804c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69394 Malicious code in mild-peach-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2518bde93b32fc5478b232ce0427149b971fc399941d083b46118a0616d1cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel-moccasin-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b27c12fca7b06d3f0dac586cc4b7f3bd3c00a84680ea6ceadaeaf0c52c7b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-tan-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1064e072c836f679621ff8ddd2998f854114f8b7d997a50cb917790fc9489c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67086 Malicious code in bumpy-gray-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7927553b66ff1c48a380f5c3979a21b521ca7d9f1a0a31d33f8b232659320730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68533 Malicious code in glamorous-violet-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ec9cbbfa963557881a44a3ed4dbd9bfab4d16ca20e63494170f7ddf67df7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66816 Malicious code in applicable-blush-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f5370dac01e95abfb2fc7dfeb88b4e2ba52c2b887d62d1336c48231ea62d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67445 Malicious code in continued-chocolate-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f2fde06d448f82543d4935ac3574bc93a68f4aed75d4b4545c06cdcfed666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69252 Malicious code in magic-sapphire-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6818543d663edafa30979a7a6c25bb834a995313e115ecd2f74004daff96757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-plum-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1c8b46cfe49c178ffd912c6eeb77e4fba9f5b37af138c4b61843a951ce4bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66690 Malicious code in aesthetic-orange-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743a34d92c3b26e08325158a8fb4099c7244542f2f09c7912c14d55fa3436e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71802 Malicious code in zygotic-white-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19af5c7eaf2e7c3b3d0b52dea964492775dfb5c15f7bec6134e217699c30ca5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...