MAL-2025-71519 Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67983 Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71099 Malicious code in theorhy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15d11789092dac8ac08e646da260e8fef749f90da1e550d356cc8709d0d6766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70765 Malicious code in spicy-rose-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36b2f8879c9e35102e6927f0666f5cb449516fa714b607c068f964f0062a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71746 Malicious code in youthful-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616b9cb04877cc547ac0f6832ae1477771155334a52e967b3db062cecc118b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69444 Malicious code in mixed-salmon-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492e1261a398828bcdfbe71f1c4d320a266eb72b8de45c40932b043c50700d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68113 Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71700 Malicious code in yappy-fuchsia-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae00a9abff69e91b03facb109a5b60c165354dcc3959ccfef8855a99248dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67490 Malicious code in cooperative-brown-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85ba6dfe1b77e54e75514ee4d12c5f09080c9cac4c7f91ea33f76be9fa3e7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69674 Malicious code in obliged-amaranth-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc98befe8ac2ebe814c48390068360f6c41f6956125697df81d6d75fbf476e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68169 Malicious code in expensive-coffee-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01112b0d40fe8a0b39ca8665341bf05b2211ed8444fba4b106ddf3bf5931c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66771 Malicious code in amused-black-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d2d535eee46bade5c911531bb50fbdf5f05474bba87634b41af4bd2c8bd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-gold-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f289503f74889a0d2faf63f930f651466bdf73520ee48c8c01dbda93cdb0d64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71753 Malicious code in yucky-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7141bf8adc65b4424fe3783dac59cc35e718e084f8e457abe6630b234b42c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd01d37760228465e452dd3e0682feeeaae077defba5998011a089c45b6c8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68996 Malicious code in itchy-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d1a7d1262342785e60ad468998bdd2775130836041d7a73f933a6226c1ec27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67793 Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...