MAL-2025-71526 Malicious code in weary-magenta-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddde8a839a4c7634daae040bef966d2931cd0c9f554eb60fa371d071b6bdf8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66896 Malicious code in awake-olive-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817d74beb92ddab99b110fdea62cbf1ec6c09c5f3716da5f36951e161ba8a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71055 Malicious code in technical-black-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34518d1893312f9b71e684e0916be0de9787e331f5cc57fcd67796bff359923c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67927 Malicious code in easy-turquoise-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4352792955d9fd4e29f6f960e192be61468901db93b715c89c6d57c7746c1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68730 Malicious code in huge-turquoise-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374da72bdabba0aa6968fafdff11cb8335d3c7c8909ef6cf1bac9cf2b98979dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71410 Malicious code in various-fuchsia-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ed5575259c50a50ae03a024a99fd02a81263e72f3dfed04bcdb78c80c7af8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68262 Malicious code in fast-orange-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d229bd5cfbef33df46f7469bab7e870e3a16c8dcbf3bdcd686a95633bdfbcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69577 Malicious code in nearby-amethyst-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2066c0b8d9712c0d2baba8cec7890a63c64ca367b6407a9b4b21d40ddbad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69766 Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71624 Malicious code in wooden-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77611270ee654474b8543db2bf655cd8059fedd14675e685f9785f14269f24a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b120a2836ea82ea14eb9049b98c411f50627106ebb1e127581bc24ee38bf03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68917 Malicious code in institutional-scarlet-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac77cedc35a9940452a25f759cd72bebab74678fef798ab054f93882fcf0f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71159 Malicious code in tory-sapphire-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e2a6138e7dc543d3d60e75715fba2864f2b4997e17120a6a4ea39bfedba57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71648 Malicious code in written-amaranth-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e93bbad3b50420eb9af948c2686b6d9934b28b7d8af905af919bf63f76f8c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71626 Malicious code in working-green-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3068ffa3f2db4309647cd36cb75cce7a4ca2523fe07cf7bdf8057ce0923a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68851 Malicious code in increasing-harlequin-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e0e3ea278465aa8e44dfeab051e3e5237a98da96b0428869d4038ccfbd172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67028 Malicious code in bored-tan-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f75aaa18f93d307754913a0231665bd25436ae1d9674242873f10bb395dbe4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70838 Malicious code in steep-black-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c52e458ca6767e43ea7f7472d08355c5c9b6b54caa3307e49b3cba277b4155e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67797 Malicious code in distinctive-harlequin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416705276e35227a7d9261c4d6597c3de24f921fb490a0c9db23ca31959cd50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69074 Malicious code in lazy-magenta-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba193a368057a545eb832f707d6ac91355d50f84b8ef33bfb83c27f5881bab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...