MAL-2025-70141 Malicious code in quiet-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3bd0edb2552011ac222175d729fb3e362b9a78009e25d45787e4950496c7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69538 Malicious code in nasty-harlequin-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2d71d5cee5b1f092013b8e46ea6ba365d5eed5466ded9481e2a9a0e59e6e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69629 Malicious code in normal-cyan-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb5f609caf52e546410eb31d954d6b07f9be422a3a71a1637f86b02f674ea0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69569 Malicious code in naval-pink-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c3278f2135551a4f1647b59c02b49870cc133d436ea8577cf18d2c34cc4604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69725 Malicious code in opposite-blue-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9d304ca359d44fcff19a25fb5dd3f670b372bfcdbcc0630114a022344d1a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66632 Malicious code in acute-ivory-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1394928ea949d83f07d691cd31a37dad34ce84eb7f838ccc2ce6bd4999782ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68927 Malicious code in integral-green-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2741f721690a7673d9a821f68a28d09272b673b1f1ed7c70be4f5cd90316c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70472 Malicious code in scared-white-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b511093396a478d5cf489a22a5e39f842233e67ab11c0dc82f93d832dcecd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69307 Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67096 Malicious code in burning-red-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78abaf0e74f03764c4be1c98482848d5f26cb929a388e30220270ba69ee13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69603 Malicious code in net-black-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3552019798c7a3e5ea1f44e788da4b1cea096bee5c584e27a3e05732c48e0e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69065 Malicious code in late-bronze-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d191e0a8defd26626f374529537907cca149eecf65cef3897547bb7fffc7cfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71342 Malicious code in unusual-magenta-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86502e71f7514f1702901721eeea288fde5aa0fc50cbadce058e9d360e162f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68208 Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67380 Malicious code in comprehensive-peach-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7400538e836cd22c57e8c1e72ccb047ca588e06f6681a730bd6de4cc977dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68047 Malicious code in enthusiastic-tomato-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e35e2dc983ea87210a60ebe7c84b0d86e482639d7e7b501c9fcd372b8164ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67206 Malicious code in civilian-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0902ce3981d4280a57000cf5222fbf3cb73197d87c3221baed691af0ccc3cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71728 Malicious code in yielding-violet-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8ed74d52c018d3f436c4e5160d90c813b993365db317db7df3187edfa84127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68102 Malicious code in eventual-gray-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55931deab3ae0ae5615438af685b8011a93a79bc7c3f8ffda4360bdb66e9a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...