MAL-2025-67259 Malicious code in coherent-emerald-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e139d010544d6ce076fe5fe1b582637f4c4816c945f2349d0f018cfb02f0bd21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67174 Malicious code in chosen-cyan-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd2fae4f54a03ec32a8320921731f7c0b454d6ddf2fa1650300b75081df8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70977 Malicious code in supreme-tan-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a189d6a1a57068d599e248185f196616262e136064a9782556b958a7be9252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70997 Malicious code in surrounding-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f50e6ab0fb53662f4acfde859c15c63d52942230aaf07124a28d5deee928d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71009 Malicious code in suspicious-turquoise-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04cec611523826f66523029f1c2be99999437bafa5b33ed3d86c6694342a759c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70895 Malicious code in structural-lime-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35ed53ca2b803218563b1208f6b298f06ffb72467bd82416c7e9eccf380b999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66575 Malicious code in above-coral-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f958d802d0caf0247d0d428a9e894339711c5af5a790a45d9e9d7a082b14bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66728 Malicious code in alive-scarlet-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4803120d621ccaaeb1c27d657cfa0839a69e6d98f113b92821a0022c8cc9948e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69010 Malicious code in jittery-violet-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873089d676c3fe0bfd28eed742aa883e61e26b5d112c57843fcf87ca72091fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68871 Malicious code in individual-turquoise-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8226e46272b8ed4af196c8261f5b61f3e2206c5b4a1ecca1dd2c5c9beb6430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66580 Malicious code in absolute-amaranth-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9614f7eed3bc024ecedac28967291e8a135ed2c6ccb59dbf56db394604cd3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69535 Malicious code in nasty-apricot-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1e83f29d8f3a617ccdaaa4bf0dad5e6757c6bb2b5ecc3872b4e0007f707d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68424 Malicious code in frequent-crimson-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b13b311a5cda812a52e8f87adc5c9ff135479ef223e853c3d1a3190164b4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71604 Malicious code in wispy-brown-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f893c3972aa0d3b8e803417940b528f11557b66214b86203d5e18aee225e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66635 Malicious code in added-yellow-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568bc83f8d86902bef6a426fb870cfffffdb138470f82249a4a834c8c6a427ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68105 Malicious code in eventual-olive-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a4d5b01a424b4771e5084ef2c8b94776861088c9c804c3282a5ac2aedcb506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68731 Malicious code in human-black-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f04d850607a19f44d31de0198fb76c1fbd34771e92f2da3475871bb45c3e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68306 Malicious code in feminist-blue-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c312875fd2feac445324e9a2be83a027eadca1eea1c46e5225c00e1268ec5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67371 Malicious code in complex-gray-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8baf98bab76852457f1d78269a39f08f1dd4201542b66482c2e2d47d934fb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...