MAL-2025-66948 Malicious code in better-amethyst-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96e482b4d6b7a93595afbad1fbd56cb97264b8bb09a9158139f2b343fbf1efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66620 Malicious code in accurate-violet-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b106f09b5e95bfeb75c485d35e31f11efeadf543d53d6ce9660e8b3cf22baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71333 Malicious code in unpleasant-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23be83de8103e298db4c796d0fe67aacded5e99439f0a72b4fa49124ee1a459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68263 Malicious code in fast-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb29ad868a03e9ddb9a0d3cb0c2a305b56894e389f049cf6f3acafb83a9bf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68285 Malicious code in favourable-olive-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1629bfa5aad124c27f6bc0b8ddeb68f69c3283cda5c0c91f70731cd72f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70726 Malicious code in sorry-aquamarine-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f80e12d59762981a75a72dcffc8fd6b885219c3496fefdd7a8ab37fc7d88fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67659 Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70671 Malicious code in slimy-aqua-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3573b4e07651720281fe4b2ef9e6c87d3ccfd1c79e3587f155787a31eccf9144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70403 Malicious code in rival-brown-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262a00aad483d8d94f8846d21aab8ddac0802aacc122947bc45f028866dea53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71165 Malicious code in tough-brown-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65eadd0dc03c7cfb53d379280bfc37690748319b29fadb5f944aac41fc8dc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68179 Malicious code in experimental-peach-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d178b33c830f8d4c6efaf63d3847dd8805a3b52eb4eae4dab49c6aa2e47a00c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70147 Malicious code in quixotic-maroon-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcfdde605e5eceb76d816c525168a3a47f9034d6b204f43ae17f9e87d93c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71600 Malicious code in wily-plum-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5be62b927e61034377c98b8d0fea17fe89133d437610d0e41e4dbc53b9d2c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68402 Malicious code in fortunate-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edc9bf1307397448c52dd91018ec02b3d8c0e112ce80a1b095f39a38e2142c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69070 Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68802 Malicious code in implicit-orange-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edda98ec0545f06e72ae32c79ec4f541b81837034de791396beca34b8d65d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71578 Malicious code in widespread-cyan-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf659feaa5ea0101d3da8e2f6ceb6f38ba84998f01a60eec5e5305421f801c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70725 Malicious code in sorry-amethyst-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f8cc503fd0df600266edbf438a3bb1c19fbac142131b7489d93bed5595e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69132 Malicious code in liable-brown-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9fce6b61a6aea31ac791123bba3a5d485f5941d7aa3565219d81cb736c7180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...