MAL-2025-67168 Malicious code in chief-azure-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5221d5b501b6be1958cc751bab026a9c4e7cbc844867d99f7f6a47f833de9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70747 Malicious code in spatial-chocolate-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3867f73fe31ff6ab661ff6fb9a25fa0be690c124f85e167f80844546d5b0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68849 Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70937 Malicious code in sudden-teal-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f03e0dafa2d3a8cbaa9dc92059aaf53c4217ae2229cecbfb301dd106b8bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69315 Malicious code in marvellous-blue-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad129a96f36d6dd1b459f9e2f9f7a64fa1a9c5436300936786a9f61233c2219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70571 Malicious code in shared-amaranth-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44039863490fcc255a016201af932e60a5996475bbad7c06d051879f8384c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-black-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7908abfb5d588a21489e07daf34db547bdf9e488d2f5671af6b0e9c310468eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69065 Malicious code in late-bronze-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d191e0a8defd26626f374529537907cca149eecf65cef3897547bb7fffc7cfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71067 Malicious code in technological-purple-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a691814793a85a196c7005d397d918f85cfcf80b305ea6b84dd582d6eed09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69835 Malicious code in passing-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faec7ffe192268f38491e412d62c2f6e52c4f1006ebd173f75cb1f7c32f565d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71546 Malicious code in welcome-white-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa42b5c9aaa5af0f4fc2a89efb7c94bf0552b379f81d660b6a2672eaab8de035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69066 Malicious code in late-lavender-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66811 Malicious code in apparent-red-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4e48689350ed839a7be44b24dd5990a0c44640fba72fb621de7d01f98d19b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70677 Malicious code in slow-indigo-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc74d55e9ccd54083d19b6078ceeded471473dabf15d48cf97e2cdb309d7afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69572 Malicious code in near-crimson-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f6d46d1b3918c3d65c5928e453bf72f4bd82a9a4da7c3fe60beea8466d0c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67355 Malicious code in compatible-coffee-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deab9a33349ec80f5d9d90c701ecd64b55938c0c69fe0c313400125e2fed7c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69206 Malicious code in long-chocolate-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15aa5297ca5131f550b695fb3064ca96f51fd43ebcbdbf0770eb02678f7d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67330 Malicious code in common-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753faff89b4f300426746bc70b549687722edd1f4875a2baf6da599de95a4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67161 Malicious code in cheerful-silver-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf81a320d096980fce7b0665f3f0acfe82233c10b969d390b8a1289f82539a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70174 Malicious code in random-maroon-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fd662117256b66fa69595a36e7a7fc6cf2c530fd399260816a5052c27df5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...