MAL-2025-71519 Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71447 Malicious code in vicious-azure-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69319aed9c8502f7e0b93c379a4b15e08a7b989777dd91ddef19930e43bc02f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70368 Malicious code in resulting-salmon-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23108e7958ea84d2eb9b1848dbda790f210582600de3a6b028b227f90cb43531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67782 Malicious code in disastrous-rose-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23b8dedb85f002c2bb2aec627314c41a8d7d6cdacf915aa6d60f94b13220adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71735 Malicious code in yodelling-sapphire-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f4e1e23bed17ae8fde64589de97aece70615f7c890851e724f6bf5ff522af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67442 Malicious code in continental-coral-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7e5bed4cc7668cafdbc2747838c8bc41a82ce8eabff2b96853a7a6585e5efa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69714 Malicious code in olympic-green-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6f9244db234f16daa11d564c4d76bc34f56c4984e7bf29fff5a6e380496ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67436 Malicious code in constant-orange-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8826d60228e6f32c5ba801d67c490ff1a586633d094726c624571caf02028a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66771 Malicious code in amused-black-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d2d535eee46bade5c911531bb50fbdf5f05474bba87634b41af4bd2c8bd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70755 Malicious code in specific-fuchsia-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dbd57b96144014864808047e3c69cc4d0427ca3067c011dcd33e3045f52946b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68991 Malicious code in itchy-coral-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3533158e6d165638d55d9ae8f050d7e5f8e9b86f62ee2ebf223c1dc2c089056b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable-gray-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e4494e8f232e8add70b6b30dd71e25d0e332099b491ebf23809b22d8f878c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-harlequin-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e0e3ea278465aa8e44dfeab051e3e5237a98da96b0428869d4038ccfbd172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping-brown-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f7c67e6fddc551e39dd8c798262a0fbe76f73ec8617290e7ba63a079b29685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding-black-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcc3ca43c858495b85383c6c61e30af845e68736d499d4c81ca95620234a761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical-maroon-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20efd6b311537e2c016d406a1b829697f9dd2d6789b6f0057c7df477fa42a9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal-turquoise-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675cc0636c9f962fcd1c80a388314fc037e2b04f5defcadc89287df14d192d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-azure-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a918f66bcceb1101ed929cdd296abace3fe35b97e4b5829265d61318226936a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70722 Malicious code in sore-lime-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c06268a8beae1efe9ba8bd2e59cf4950320241f1b004453fb1d90d07cec7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67867 Malicious code in dreadful-yellow-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da962d3c8f84ba3f18426560c437a9af13176d4eaa7cfba9e7daf71d35c648f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...