MAL-2025-69098 Malicious code in legislative-chocolate-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b09905b97b3c436575752484fb9798270ba21dd29f4b33b5a598f3df24c3bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71500 Malicious code in voluminous-blue-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad91476de6c94c820fd873580c4181ef1c5a36eb37ff2a77c6c20b7576b3765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70851 Malicious code in still-turquoise-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ba7299ad60faabc5b54333d1a9fdaf5f0d7fc7f12dd3d5f8eefbb47d02e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66965 Malicious code in binding-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8320738baead6af2bf10b6bfd6c36b7532e84f595b033ea209136bcdae8b1d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67842 Malicious code in dominant-sapphire-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9190052f273a5f0486d4ecb17715057ead05366df4383d717a38aa6ea91f3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66654 Malicious code in adjacent-peach-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e53a2421669459459b4c9e9d6c2d5a1ecca93a2aaea6ca6df3cfe736931c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68818 Malicious code in improved-olive-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9458d41275be0abd6cfe5283943576b594f9982917d5b8d2acea23b25600ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68181 Malicious code in experimental-tomato-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5b06d8dcff378015c73659cb952f6dea397f45f610c13eb7926022af864a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69260 Malicious code in main-fuchsia-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b3394a7972fa6f001e533ee6ed1a22f9a8719f5fa46028be013568e4a33de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70439 Malicious code in ruling-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46dcc80ef31cf47c1f96d0ed43757aa11369292da1f79f93e658eae25a82cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69483 Malicious code in moral-magenta-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bee0fe0256fe983256c6120126b9c0ee350999214a3aaf060ffc88fff448ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67539 Malicious code in criminal-aqua-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab92c0dcc660a4397b309589c23fcdac382eaf542741973537e39a51e9f05b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69796 Malicious code in overseas-amaranth-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a12dd0145f759a9add25331ac8d6d0d4545dce1f0e4dcda4a7f0df650a070e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67677 Malicious code in defiant-lavender-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d61ab6e2e6315ea624ace1a8228ae93e4e1a6da1bdfb6004ec0f547d8361231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70173 Malicious code in random-ivory-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e37ae6830c8f18657af35e703746010db0db1e2bc081efb08e7b5295b672daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67583 Malicious code in cultural-gray-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc25dae8660556d4c4908cc03cfb116df7a8f3903e88b953d2a5ddce0c5da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct-aqua-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226b422317ce0cebbebe29a8b64dee113a5d4ed8f6172cbfa31751f75b8eea17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-tan-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1064e072c836f679621ff8ddd2998f854114f8b7d997a50cb917790fc9489c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled-coffee-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0102affe747c2e886ce1f8b8fa7373f63f3d6a82d406893a51162861a226a7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...