MAL-2025-70725 Malicious code in sorry-amethyst-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f8cc503fd0df600266edbf438a3bb1c19fbac142131b7489d93bed5595e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67986 Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69132 Malicious code in liable-brown-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9fce6b61a6aea31ac791123bba3a5d485f5941d7aa3565219d81cb736c7180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71237 Malicious code in uncertain-sapphire-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f295e8dede1a300c83597847ee5f13851fe2e9ad941c5187fa925677f2de5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70334 Malicious code in required-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2982061858556261e614e1b43d33f94fa04b447fe5d9e59e1677dbec2ed6f793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68834 Malicious code in inappropriate-silver-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab481d663fcab2bda857940c929336287921afc510ef98b5e641eb9a263a7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68053 Malicious code in entitled-apricot-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f1a1f87eebdcfa71e0d151c7abef90d5d9b501676fa011b5e489452a58ff6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67570 Malicious code in crude-plum-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74231e4b6c1c5b2d0db6f1c98b1912f41928853659d77d061e5f89177883158a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70557 Malicious code in shaky-aquamarine-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7702dee9be83d87423fee59454f9d89e3800e299f6db8c1d1315677a70c9659e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69331 Malicious code in mathematical-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce8b55f5fedffa444a7bc63ac7eb81db4c2edd08cc80ac9d04120c1051e7a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70217 Malicious code in real-amaranth-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6754fb3e9d45c6f94db2de33517e938ccaf2f2088d79a0fc59d114e5985b3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70609 Malicious code in shy-crimson-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c72ee236a89fd80832a38ac814cf8e4f8c2a3f4277c7aff3a0af2cc68386a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71050 Malicious code in tasty-green-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca26a3527b4ed9f8d552622389bfb350aebbafe1e1e08a436811e6bdefe51d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68582 Malicious code in greasy-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd80e6332335c5ddab3126b7717e33fbe15561a56d546632acfb557c229eafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68904 Malicious code in innocent-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b120a2836ea82ea14eb9049b98c411f50627106ebb1e127581bc24ee38bf03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68938 Malicious code in intense-amaranth-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a779ab82f1633dd34123a92395483b457a16d7096bf99615b1da53fe3a03a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69702 Malicious code in official-pink-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5000e62f06106ab11742d94e64d45a09a2614570a774a4e9ca73c455ac0d1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69249 Malicious code in mad-sapphire-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016ba71d837c76d976017acd082d0336a151fbf8e277c8b325ca36afe78b8ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...