MAL-2025-67272 Malicious code in collective-black-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba28f57509daaef6f5f46f42995d30a516865e558b818eaf4b07c4edcbb4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71476 Malicious code in vitreous-amber-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564a5f5b31ee732008963b6f231852436b5ab720412d97b636396f481f2b1853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71384 Malicious code in usual-bronze-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2bff99d1a585f4814712a6158a4f5c7a1b0330ac64693615a6e5ba5c81404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70797 Malicious code in spotless-sapphire-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620cb9f8abb1c9e40fce53ffc026c9620e57eda993fca43dd9114b0968810a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70877 Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69701 Malicious code in official-green-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bd057ebec4d6117c8acb3fa003625c4abef79d72912aa1263306073f1a27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69073 Malicious code in lazy-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae4daa038f351673b5b76520af182653ceb094019af2896d7358fd6df1d793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67115 Malicious code in casual-amber-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749c1c107c480f5e02a82359f8690e2022d1abb94b9da4aafae34cd41e77b3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70414 Malicious code in romantic-emerald-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e486cca7927a40d92f742d71581d78820c2974078854bb93faf6cb5229248295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70863 Malicious code in straight-pink-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faac6b1361fef3f7dbc13df386c1f409609729bc4ec04c99543b040ac5fb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67851 Malicious code in double-sapphire-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c79e97c70da78e4693d25ab309a27639b45dba0167fc6a60f56695e0309373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71185 Malicious code in tremendous-scarlet-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40213fb2894a0142e877ae2527ea25813893570e7edefa1fbf2eb29f190f4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67523 Malicious code in courageous-crimson-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419b1e4473b4dd0ec98266db2e812fc976f3214bae44d1aecc92e1fa4ab8e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66624 Malicious code in actual-amber-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a4d1c80c457c80cc4b8fe370e4738d4360e7a76cb4a7122abc41ee43a77183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67590 Malicious code in current-coral-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21642c22551faa3ab3edc8f25a15196415770d5f130ed439d876ba545b7717b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67373 Malicious code in complex-peach-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f128ef25cf365a2af343225b257116e9c34637f6e4cc5e3ad10f81e67756023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...