MAL-2025-66639 Malicious code in additional-copper-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812ceae987943be1a55957836d51175c3abae7bc3c6dc793fda417401f143508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68078 Malicious code in essential-coral-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0750ff917e95d976d044ee0850289b332a7449f3d605c39aa56ce1688c885c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67398 Malicious code in condemned-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67986 Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69837 Malicious code in passive-lime-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277df7a50fe88cf26037fbc9d0ff3dcac261788ca36abd015ae4bb8b73458d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71300 Malicious code in uninterested-jade-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b89904ee9d26d7b27216c044ae57ccb016a79b28be0bc69f94be3e1c6f97f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71142 Malicious code in tiny-amaranth-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e9063f345f407edf15ce0bca25c62dea86bd6c812c68c66d90eaf10ab640ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67659 Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67217 Malicious code in clean-plum-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b020a45fc8bf7a15b8806a067847e679bf9e1251f966b2023d922ce1af044e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69854 Malicious code in peaceful-jade-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1feaddea1bc30b653668b480992ba4e97d413df94af05a3f700fb445c46c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68664 Malicious code in helpless-plum-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1001041a5344d10719f28fb3150584b7bd6be31b08850bde799cd0965387e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71404 Malicious code in variable-chocolate-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc5c87e44fa0ef20264749544b88c160bf3b4693fbf25a951b992f44755fce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69331 Malicious code in mathematical-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce8b55f5fedffa444a7bc63ac7eb81db4c2edd08cc80ac9d04120c1051e7a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68403 Malicious code in forward-coral-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163e4c6e52845a94770049fbce8c5cd88195435dfc76afdfc3b66decb1a516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68834 Malicious code in inappropriate-silver-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab481d663fcab2bda857940c929336287921afc510ef98b5e641eb9a263a7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67570 Malicious code in crude-plum-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74231e4b6c1c5b2d0db6f1c98b1912f41928853659d77d061e5f89177883158a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69891 Malicious code in physical-sapphire-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad77ed563c99d336f3278f134c27480c3512faf2127fc6bf8556ee20e3bbb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68934 Malicious code in intelligent-indigo-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3236da44132a0a7b5ff1862e026c36e0ffe678bd4ba5712d8f81c344df78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...