MAL-2025-68086 Malicious code in estimated-copper-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e090fced1bc3b2148f98e8582bae050046128dd03886782a78e9bc7c74ecaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69828 Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67372 Malicious code in complex-jade-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815a719b585b622b13ca83a1818128b59319277cbb85f5dbc1326fde0604a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71038 Malicious code in tame-chocolate-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1efd451b7d6586b94559ee020d24000712d1d6ad5db07ef43ec82086b8bb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67610 Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70097 Malicious code in psychological-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b28bff64f07533a7fde60a1abb6e0ad7af52d0d87c21db63daba06ebabfbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70247 Malicious code in redundant-copper-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83be33bb838ae1270ca3d9c43cc88d5b5b440a1b40965bb8c472afcf98dcf4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71079 Malicious code in terrible-blue-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c31d2f2f455e81c08b320b16525e825151809500f538ef68befd7c01c477b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67278 Malicious code in colonial-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160156899d54efae165224b9de6a63ad9d79c83010fc660a3dbf1c0b4a779de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69120 Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71416 Malicious code in varying-silver-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ba0b3bbeed6858ce4b5ffd4bf8d892460e4f9dc2beca25386dd44029c3c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68176 Malicious code in experimental-black-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce86214385d9ab56677293ef8e4f73dc67e1f02a56418fa7d2f8ac5a5b0b334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67902 Malicious code in dusty-magenta-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64eda07b06044f0b53fe5243389746549d2964982b07c211da6608518d61786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70006 Malicious code in primitive-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4dfe87855174c088a2ec87c7aed327e66b191959562392664b638e573101948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70530 Malicious code in senior-lavender-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b496652867d1ca8bd180071f9ba47e27ec65a98e0d66cbf75c6a162b1a400a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67048 Malicious code in brave-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d467d38ef61cdafcfcc163e771ac9688ba2952a03605e694fe309e09fddccdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...