MAL-2025-70055 Malicious code in prominent-indigo-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b5e5977685307a6cb869299e581d8b6779cc969103e1f0a2dbc2e5adabf2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70558 Malicious code in shaky-azure-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a918f66bcceb1101ed929cdd296abace3fe35b97e4b5829265d61318226936a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69571 Malicious code in near-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7806b961690c9e6b6b22ae42eac72a5786468af855437e658e90f58e433d7d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71665 Malicious code in xenacious-tomato-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf797140d786549263937d29a5791c8078010dc1389c3d0feb019e9764c87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67445 Malicious code in continued-chocolate-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f2fde06d448f82543d4935ac3574bc93a68f4aed75d4b4545c06cdcfed666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69046 Malicious code in key-yellow-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae1111d2684c2a91d1a402983493e994218b28e6b1e0de16750edb31b42496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68285 Malicious code in favourable-olive-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1629bfa5aad124c27f6bc0b8ddeb68f69c3283cda5c0c91f70731cd72f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67813 Malicious code in disturbing-maroon-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d588550aca143f1bf55c3a526a316280d586cf0df174b571f9626d546804c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69018 Malicious code in joyous-beige-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2d478e3e13ffa60c1e296d83741c9cebf2dd3d0f46d3bf40905df7a99d164b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67074 Malicious code in brilliant-red-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b99bca911f9c10da4efe6ef0feccd31ff9514dc19d2225f3aa1c92dc95ed125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66690 Malicious code in aesthetic-orange-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743a34d92c3b26e08325158a8fb4099c7244542f2f09c7912c14d55fa3436e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70438 Malicious code in ruling-coral-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be16dcdee9cf3a24e2b6c71d4d8fb12f188d86057d1817a179459daf2d172f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68053 Malicious code in entitled-apricot-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f1a1f87eebdcfa71e0d151c7abef90d5d9b501676fa011b5e489452a58ff6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67461 Malicious code in continuous-turquoise-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfcf6ab9828297610f4e013987507c659b5b0e3ecc6c6fc6b17045acc6f0cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68799 Malicious code in implicit-brown-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e33ab51a6228c8d8ba1524cb7310583cbb73ac313662ec23af01e932084b2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67036 Malicious code in bottom-white-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86053435bad461d822944e119a6134dd7a3b29a7c8f7741ce9842e9eee650272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69356 Malicious code in melodic-gold-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ead1f36f6e54ec7ea92506786df8899e9028cef25f59e83a39ea79b564d02fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66885 Malicious code in autonomous-ivory-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be5662fb597eca85213c3273cc55781378595742def177892232ecc97ee6de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-klanting75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d5053ca4da8344f6f9d9bc673e8dfcdd0aee3a3e01ac312345badca11e83e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...